X-13 Posted May 18, 2015 Posted May 18, 2015 I'm currently setting up some service accounts for software, but I can't get one of the restrictions to actually apply to it. I'm trying to set "Deny local logon" and "Deny log on through Terminal Services", but only the latter seems to actually apply. I've got a laptop next to me that I'm testing it with, and no amount of gpupdate /force and restarts are blocking logon. The GPO is linked to the domain and applies for "Authenticated Users" and "Domain Computers". What have I missed here?
bald_pig Posted May 18, 2015 Posted May 18, 2015 I'm guessing that's an either/or option, have you tried with just "Deny local logon"?
featured_spectre Posted May 18, 2015 Posted May 18, 2015 Not SQL 2012/2014 is it? I'm having the exact same issue.
X-13 Posted May 18, 2015 Author Posted May 18, 2015 I'm guessing that's an either/or option, have you tried with just "Deny local logon"? Not yet, I wanted both... it has to have domain admin rights to work properly. Which, now that I think of it, could be the problem...
X-13 Posted May 18, 2015 Author Posted May 18, 2015 (edited) Not SQL 2012/2014 is it? I'm having the exact same issue. Spiceworks... Update: removing "Deny log on through Terminal Services" doesn't change anything... The local security settings on the laptop change to allow/deny TS login, but the local login one doesn't change. What a mysterious jogo. Update 2 - The Updatening: Found out what it was... conflicting GPOs. Whoever thought it was a good idea to split standard computer configs into personal/shared - laptop/desktop/tablet needs to be taken out back. Cthulhu's sake... Now I gotta decide if I can be bothered to re-do GPOs in a sensible way. Edited May 18, 2015 by X-13
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now