We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
Contact Forum Editor

Send an email to our Forum Editor:


PLEASE NOTE: Your name is used only to let the Forum Editor know who sent the message. Both your name and email address will not be used for any other purpose.

Tech Helproom


It's free to register, to post a question or to start / join a discussion


 

Changing security group template attributes in AD


tonyB1983

Likes # 0

Hi,

Am running Windows Server 2008 R2 and would like to modify the properties of a default security group in Active Directory.

Essentially, I need users who are grouped into the "Domain Power Users" security group to be allowed to log on on remotely. I know that there must be a setting under here to do this, because if I remove a user from this group, they are then able to log on remotely, but when they are a member of this group they cannot. Windows forums are typically unhelpful, by suggesting that I "add the user to the Remote Desktop Users Group" which doesn't work (I'm guessing an explicit deny permission somewhere under the Domain Power Users Group overwriting the Remote Desktop Users Group "allow" permission is the reason for this). I've found a tab called "Attributes Editor" under each User / Group but I can't see any settings here that seem to affect remote log on.

I've tried adding permissions via Group Policy but it doesn't work either.

Thanks

Like this post

Reply to this topic

This thread has been locked.



IDG UK Sites

Best camera phone of 2015: iPhone 6 Plus vs LG G4 vs Galaxy S6 vs One M9 vs Nexus 6

IDG UK Sites

In defence of BlackBerrys

IDG UK Sites

Why we should reserve judgement on Apple ditching Helvetica in OS X/iOS for the Apple Watch's San...

IDG UK Sites

Retina 3.3GHz iMac 27in preview: Apple cuts £400 of price of Retina iMac with new model