+ Post New Thread
Results 1 to 5 of 5
Windows Server 2008 R2 Thread, domain admins cant logon locally to win XP machines in Technical; Hi Guys Quick question in relation to local logon on XP machines. I support new site so don't know the ...
  1. #1

    Join Date
    Sep 2012
    Location
    Dublin
    Posts
    10
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    domain admins cant logon locally to win XP machines

    Hi Guys

    Quick question in relation to local logon on XP machines. I support new site so don't know the infrastructure inside out yet hence this cry for help ;-)

    Problem:
    Domain admin accounts cant log in to win XP machines remotely. Yes, domain admins are in remote operators as normal.

    I have checked GPO and deny local log on is not set. This affects all XP machines but not Win7.
    No policies set on domain admin OU besides main GPO, tested all settings in GPO - no cookie ;-(

    Now, not a huge issue but it drives me mad as I don't know where to turn next. Seen this issue before years back and remember it was fixed by either adding remote operator permissions or checking the GPO settings.

    Any ideas would be welcome guys!

    DC: Win2008R"
    Domain functional level: 2008
    No recent changes software/hardware

  2. #2

    Join Date
    Sep 2012
    Location
    Dublin
    Posts
    10
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    SOLUTION FOUND! Will post it here in case someone has a similar issue ;-)
    Default workstation policy had a "local policies/allow log on through terminal services" setting set to ALL USERS (not domain users) and of course some Muppet forgot to add domain admins to all_users" group...

  3. #3

    Join Date
    Oct 2008
    Location
    Lincolnshire
    Posts
    2,273
    Thank Post
    13
    Thanked 235 Times in 223 Posts
    Rep Power
    69
    Domain admins should be part of the local administrators group on the computer and providing RDP is enabled there should be no problem.

  4. #4

    Join Date
    Sep 2012
    Location
    Dublin
    Posts
    10
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by MatthewL View Post
    Domain admins should be part of the local administrators group on the computer and providing RDP is enabled there should be no problem.
    In this scenario there was a GPO set to "all_users" which has overwritten all other settings - domain admins were not part of all_users ;-)

  5. #5

    Join Date
    Oct 2008
    Location
    Lincolnshire
    Posts
    2,273
    Thank Post
    13
    Thanked 235 Times in 223 Posts
    Rep Power
    69
    Domain Admins automatically gets added to administrators when a machine is joined to the domain, so unless you have a policy over writing that its an odd one.

    Least you have is resolved just can't quite picture what you describe.

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 5
    Last Post: 2nd December 2012, 02:24 PM
  2. schedule Tasks from Win7 to win XP
    By timbo343 in forum Windows 7
    Replies: 2
    Last Post: 15th February 2011, 09:50 AM
  3. adding a school logo to win xp logon screen
    By goodhead in forum Windows
    Replies: 12
    Last Post: 13th October 2007, 09:55 PM
  4. Replies: 7
    Last Post: 2nd May 2007, 06:58 PM
  5. Rebooting looping Win Xp Machines
    By nuttygeek in forum Windows
    Replies: 16
    Last Post: 8th February 2006, 07:30 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •