Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » cannot log on to DC
cannot log on to DC [message #328069] Wed, 25 November 2009 23:40 Go to next message
aconti  is currently offline aconti  United States
Messages: 113
Registered: August 2009
Senior Member
Hello,

I am getting this error,

You cannot log on because the logon method you are using is not allowed
on this computer. Please see your network administrator for more info.

I am trying to log on to a DC using a normal user which I have given
him delegation of control for a particular OU so that he can log in and
use the delegated control whenever needed from the DC. I have added the
user to the login locally list on the Domain Controller group policy
setting, can you pls help identify the problem.

Thank you


--
aconti
------------------------------------------------------------ ------------
aconti's Profile: http://forums.techarena.in/members/73272.htm
View this thread: http://forums.techarena.in/active-directory/1275256.htm

http://forums.techarena.in
Re: cannot log on to DC [message #328070 is a reply to message #328069] Thu, 26 November 2009 00:25 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello aconti,

Install the adminpak on the user machine, so there is no need to logon to
the DC. That's the really better way. Domain users should NEVER logon to
a DC.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello,
>
> I am getting this error,
>
> You cannot log on because the logon method you are using is not
> allowed on this computer. Please see your network administrator for
> more info.
>
> I am trying to log on to a DC using a normal user which I have given
> him delegation of control for a particular OU so that he can log in
> and use the delegated control whenever needed from the DC. I have
> added the user to the login locally list on the Domain Controller
> group policy setting, can you pls help identify the problem.
>
> Thank you
>
> http://forums.techarena.in
>
Re: cannot log on to DC [message #328523 is a reply to message #328069] Thu, 26 November 2009 12:49 Go to previous message
florian  is currently offline florian  Germany
Messages: 484
Registered: July 2009
Senior Member
Howdie!

aconti schrieb:
> You cannot log on because the logon method you are using is not allowed
> on this computer. Please see your network administrator for more info.
>
> I am trying to log on to a DC using a normal user which I have given
> him delegation of control for a particular OU so that he can log in and
> use the delegated control whenever needed from the DC. I have added the
> user to the login locally list on the Domain Controller group policy
> setting, can you pls help identify the problem.

Yep, I agree with Meinolf here. DC logon should only be allowed to
domain and enterprise administrators. If you need people to log on to
machines, have them log on to Terminal Servers - not the DC. Is there a
reason you want a user to log on there? Is it just delegation of rights
so that they can manage OUs? If so, download RSAT and install it on the
users' machines and have them run them from their workstations.

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
ANY advice you get on the Newsgroups should be tested thoroughly in your
lab.
Previous Topic:Strange Replication Issue
Next Topic:How to Change "Display Name" of a Distribution Group
Goto Forum:
  


Current Time: Thu Jan 18 20:47:13 MST 2018

Total time taken to generate the page: 0.03396 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software