Act as part of operating system

[Joe]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi All,

Does anyone know how to grant the "Act as part of the operating
system" right to a domain or local user on a Windows 2000 member
server?

This software "Business Objects", requires that the account have this
right and we are reluctant to give the consultant our Administrator
password. I created a local and domain account and granted them the
right in the Local Security Policy on the member server. However, the
Effective Policy Setting is grayed out which I think means that it is
being blocked by a domain policy.

I really didn't want to go messing with the Default Domain Policy, but
I will if that is the only option.

Any help would be appreciated.

Thanks.

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

What you could do is create an Organizational Unit with it's own GPO where that user
right is configured for that server and move that server into that OU. Then that
would be the effective user right for that server unless "no override is configured
on the domain GPO. Other policy settings would still be inherited by that server in
it's own OU. After you move the server into the OU and configure the GPO for that OU
run " secedit /refreshpolicy machine_policy /enforce " first on the domain controller
and then on your server and the policy should show as the effective setting. If not,
try rebooting the server. --- Steve


"Joe" <searchnewsgroups@yahoo.com> wrote in message
news:a92a81e2.0409081910.1b4c6aa2@posting.google.com...
> Hi All,
>
> Does anyone know how to grant the "Act as part of the operating
> system" right to a domain or local user on a Windows 2000 member
> server?
>
> This software "Business Objects", requires that the account have this
> right and we are reluctant to give the consultant our Administrator
> password. I created a local and domain account and granted them the
> right in the Local Security Policy on the member server. However, the
> Effective Policy Setting is grayed out which I think means that it is
> being blocked by a domain policy.
>
> I really didn't want to go messing with the Default Domain Policy, but
> I will if that is the only option.
>
> Any help would be appreciated.
>
> Thanks.

 

[Joe]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Steve,

Thanks for your help, your suggestion worked perfectly.

Joe

"Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message news:<d8Q%c.404305$%_6.206285@attbi_s01>...
> What you could do is create an Organizational Unit with it's own GPO where that user
> right is configured for that server and move that server into that OU. Then that
> would be the effective user right for that server unless "no override is configured
> on the domain GPO. Other policy settings would still be inherited by that server in
> it's own OU. After you move the server into the OU and configure the GPO for that OU
> run " secedit /refreshpolicy machine_policy /enforce " first on the domain controller
> and then on your server and the policy should show as the effective setting. If not,
> try rebooting the server. --- Steve
>
>
> "Joe" <searchnewsgroups@yahoo.com> wrote in message
> news:a92a81e2.0409081910.1b4c6aa2@posting.google.com...
> > Hi All,
> >
> > Does anyone know how to grant the "Act as part of the operating
> > system" right to a domain or local user on a Windows 2000 member
> > server?
> >
> > This software "Business Objects", requires that the account have this
> > right and we are reluctant to give the consultant our Administrator
> > password. I created a local and domain account and granted them the
> > right in the Local Security Policy on the member server. However, the
> > Effective Policy Setting is grayed out which I think means that it is
> > being blocked by a domain policy.
> >
> > I really didn't want to go messing with the Default Domain Policy, but
> > I will if that is the only option.
> >
> > Any help would be appreciated.
> >
> > Thanks.