Stuppored's 70-640 Studytime

I've got the self-paced training kit which I am mowing through ever so slowly.
I'm on page 83 Practice 1 where it asks to login as Bmayer. I am running it remotely and I am plagued by the "
You cannot log on because the logon method you are using is not allowed on this computer"
error. I am positive that if I make bmayer an administrator, this error will go away, but what is the most restricting way to add a user/group to be able to login remotely to a server? I've tried the remote tab already.

I am also only using Server 2008 currently for this book - how badly am I screwing myself? Rate the answer out of 10. 1 is lowest, 10 is highest.

Find more posts tagged with

Comments

earweed

Did you do everything before that already? Practices in lesson 2&3 and all the other stuff. What's your basic lab setup?

Stuppored

earweed wrote: »

Did you do everything before that already? Practices in lesson 2&3 and all the other stuff. What's your basic lab setup?

Yes I did everything page by page. Basic lab setup? That's too general a question. I am looking for a solution to the question I asked. I have searched google with everything seeming to point to terminal services.

Stuppored

I goofed. The solution was in the paragraph directly above the practice examples. Now I don't understand why adding all the domain users to the 'print operators' group allows my users to login to the DC. It's just a known fact that print operators has this ability? Can anyone point me to the property that gives print operators the right to signon locally on the DC?

unnamedplayer

Stuppored wrote: »

I goofed. The solution was in the paragraph directly above the practice examples. Now I don't understand why adding all the domain users to the 'print operators' group allows my users to login to the DC. It's just a known fact that print operators has this ability? Can anyone point me to the property that gives print operators the right to signon locally on the DC?

Print Operators is one of the groups listed as "Allowed to Log On Locally" in the Default Domain Controller Group Policy.

Computer Configuration > Policies > Windows Settings > Security Settings > Local Policies > User Rights Assignment: "Allow log on locally"