Windows Server - logon as regular user on server

Asked By steve

20-Nov-09 03:37 PM

I use runas to do various tasks on the server (and else where for that
matter).

Anyway I want to use runas to login as a regular (non administrator)
user on the 2003 server. However it looks like non administrators cant
log on to the server.

How can I make it so that I can log on as a non administrator onto the
server.  I dont want everyone just one particular user. Really I just
want to use the runas to open the exploerer as a non admin.

Regards

20-Nov-09 04:56 PM

You can log on the member server as a regular user.
However, you cannot log on the Domain Controller.
This is due to Default Domain Controllers Policy, under
Computer Configuration
Windows Settings
Security Settings
Local Policies
User Rights
Allow Logon Locally

Just add user or a group to "Allow Logon Locally" to enable user(s) to logo
no the DC.

20-Nov-09 05:48 PM

Hmm. What sort of stuff are you trying to do? Is this a DC? What does it
run? If this is not an application/terminal server that is intended for
non-admins to log into it, I would suggest you not do this - you could be
opening yourself up to a big security risk.

21-Nov-09 09:17 AM

Dusko thanks for the answer.

21-Nov-09 09:17 AM

This machine is at a remote site.
Most of the management I do remotely. I want a local account because
sometimes I want to test out access control. While you can set
permissions there is nothing like going into a folder as a user and
testing access for real.

Regards

21-Nov-09 12:50 PM

Sure, but is not that something your users would be doing across a LAN/WAN
connection anyway, rather than at the console?
Anyway, no biggie, was just curious.

22-Nov-09 05:36 PM

Don' forget that non-admins cannot use RDP to connect until you change the
permissions. So your normal users will need both Logon Locally and Use remote
desktop permissions.

--
Dave Mills
There are 10 types of people, those that understand binary and those that do not.

23-Nov-09 09:29 AM

Yes I suppose that is true. Good point.

However I think what I will do is log in using remote desk top as
administrator,  then use a runas to open an explorer window as a user.
Then I will be able to use the explorer as a user but in the
Administrators remote desktop window.
thanks