Can't assign "log on locally" right

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

We have set up an "app" server, which is a member of my domain, and are
trying to assign the "log on locally" right to a "local" (not a Domain)
user.

I have tried logging on as the Domain Admin as well as the local
administrator.

In all cases, I go to Administrative Tools --> Local Security Policy -->
Local Policies --> User Rights assignment and find "Allow log on locally".

But when I Dbl-Click, the "add user or Group" (as well as the "remove) is
grayed out

What am I missing here ?

TIA

JM

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

It is likely that the value of that user right is being set
from AD based GPO.

--
Roger Abell
Microsoft MVP (Windows Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Jim Matthews" <jmweb@comcast.net> wrote in message
news:O3b$6xsPFHA.880@TK2MSFTNGP15.phx.gbl...
> We have set up an "app" server, which is a member of my domain, and are
> trying to assign the "log on locally" right to a "local" (not a Domain)
> user.
>
> I have tried logging on as the Domain Admin as well as the local
> administrator.
>
> In all cases, I go to Administrative Tools --> Local Security Policy -->
> Local Policies --> User Rights assignment and find "Allow log on locally".
>
> But when I Dbl-Click, the "add user or Group" (as well as the "remove) is
> grayed out
>
> What am I missing here ?
>
> TIA
>
> JM
>
>