Home page logo
/

basics logo Security Basics mailing list archives

RE:How to disable interactive logon for service accounts on W2K a nd W2K3
From: "McIntyre, Robert" <Robert.McIntyre () McKesson com>
Date: Wed, 11 Jan 2006 08:29:05 -0800

I was wondering does any one know of any setting to disable interactive
logon for service accounts on W2K and W2K3.

Any light in this direction would be highly appreciated.

Thanks,

Saj

You can use security policies to restrict the interactive logon for an
account.

For instance if you open the local security policy mmc, expand the local
policies menu, and select user rights assignment.  Take a look at two
settings.  One is the, "Deny local logon"; you can add your service accounts
here to prevent them from logging on interactively.  You may also want to
the note the opposite setting which is, "Log on locally".  This will show
you all the accounts that can log on interactively.


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
----------------------------------------------------------------------------


  By Date           By Thread  

Current thread:
  • RE:How to disable interactive logon for service accounts on W2K a nd W2K3 McIntyre, Robert (Jan 12)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]