Shulou(Shulou.com)06/01 Report--

Group policy how to set up in order to enable ordinary users to log on to the domain controller computer, I believe that many inexperienced people are helpless about this, this article summarizes the causes of the problem and solutions, through this article I hope you can solve this problem.

What is a domain controller? How do I set group policy in a domain controller so that normal domain users can log on to the computer as a domain controller? The details are as follows.

Domain controller contains a database composed of domain accounts, passwords, computers belonging to this domain, etc. It is responsible for managing the entire Windows domain and all computers in the domain. Configuration domain controller is beneficial to centralized configuration management of domain users and provides security guarantee for network shared resources. Therefore, configuring domain controllers is an important part of Windows Server 2003 server security configuration.

In Active Directory, each Domain Name System (DNS) domain name is identified as a domain, and each domain is managed by one or more domain controllers. For example, a domain name of "myzyy.com" must have a server that functions as a domain controller.

The domain functions as follows:

1. Domain accounts allow you to log in to any host in your domain.

2. Log in with a domain account to access all authorized resources in the domain.

3. System administrators in the domain can delegate authorized domain accounts to improve system security and facilitate centralized account management.

When a computer connects to the network, the domain controller first identifies whether the computer belongs to the domain, whether the user's login account exists, and whether the password is correct. If any of the above information is incorrect, the domain controller will deny the user access to this computer. If you cannot log in, you cannot access the resources that are protected by permissions on the server. You can only access the resources shared by Windows in the way of peer-to-peer users, which protects the resources on the network to a certain extent.

Therefore, the general user will appear when logging in using the domain controller warning prompt as shown in the figure, then how to let the general domain user log in as a domain controller computer?

We can open group policy to allow regular users to log on to domain controllers.

1: Perform actions: Start-Administrative Tools-AD Users and Computers-Right-click Domain Controllers OU-Properties-Group Policy.

2: Select Domain Controllers Policy-Click Edit to run Group Policy Editor.

3: Execute: "Computer Configuration"-"Windows Settings"-"Security Settings"-"Local Policy"-"User Rights Assignment"-double-click "Allow Local Login."

4: Click the Add User or Group button, select the Domain Users group, OK.

After opening the "Allow local login" privilege to users, it is now possible to log in as a normal user.

Set up the group policy of domain controller, so that ordinary users can also log on to the computer of domain controller, this is also a small skill of group policy. I hope this article can be helpful to readers.

After reading the above, do you know how to set up group policy to enable normal users to log on to the domain controller computer? If you still want to learn more skills or want to know more related content, welcome to pay attention to the industry information channel, thank you for reading!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.