none
User creation RRS feed

  • Question

  • Hi,

    I'd like to create a user that could :

    • be a local admin of the domain
    • add / remove computers from the domain

    But i'd like that he could not conect to the server.

    Do you know how i could do that?

    thanks,

    jonas

    mercredi 4 mars 2015 10:25

Réponses

  • Hi Jonas,

    To do this, you have to deploy a GPO on your servers' OU with the following parameters in order to deny local and remote desktop access to servers :

    Computer Management\Windows Settings\Security Settings\Local Policies\User Rights Assignment :

     -> Deny log on locally

     -> Deny log on through Remote Desktop Services


    Cordialement,

    Sylvain

    Blog : http://sylvaincoudeville.fr

    mercredi 4 mars 2015 10:31

Toutes les réponses

  • Hi Jonas,

    To do this, you have to deploy a GPO on your servers' OU with the following parameters in order to deny local and remote desktop access to servers :

    Computer Management\Windows Settings\Security Settings\Local Policies\User Rights Assignment :

     -> Deny log on locally

     -> Deny log on through Remote Desktop Services


    Cordialement,

    Sylvain

    Blog : http://sylvaincoudeville.fr

    mercredi 4 mars 2015 10:31
  • Hi Jonas,

    To do this, you have to deploy a GPO on your servers' OU with the following parameters in order to deny local and remote desktop access to servers :

    Computer Management\Windows Settings\Security Settings\Local Policies\User Rights Assignment :

     -> Deny log on locally

     -> Deny log on through Remote Desktop Services


    Cordialement,

    Sylvain

    Blog : http://sylvaincoudeville.fr

    Hi,

    thanks! It worked fine!!

    vendredi 6 mars 2015 09:23