LOCAL POLICY WITH DOMAIN USER

[Moscerino]

hi all

can someone explain me why I set a LOCAL POLICY on my computer and it doesn't work correctly? I made this settings:
-in the "deny logon locally" policy, I added the DOMAIN USER (for example) john smith. I saw DOMAIN\john.smith with a flag under the "local policy setting" column.

IF I LOGOFF OR I REBOOT THE SYSTEM, MR. JOHN SMITH CAN ACCESS ON MY PC AND DESTROY ALL.

I FORGOT SOME SETTINGS? I CAN'T SET LOCAL POLICIES WITH DOMAIN USERS??

PLEASE HELP ME

 

[brontosaurus]

if your PC is a member of a domain, then the domain policy overrides your local policy. However, if the adjacent domain policy is not defined, then your local settings will be effective.

 

[GlenJohnson]

Also, you might want to add yourself to the admin group on the local. If you don't have a domain, are you an administrator on the local? Glen A. Johnson
Microsoft Certified Professional
glen@nellsgiftbox.com


"Knowledge of the world is only to be acquired in the world, and not in a closet."
Lord Chesterfield 1694-1773); English statesman.

 

[Moscerino]

Workstations are part of a domain named domain.com.

I've set policies using a DOMAIN ADMINISTRATOR. I just setup domain policies for a simple logon script, in user configurations.

What are the steps to deny logon on a workstation? I want to deny logon to a DOMAIN USER like DOMAIN\user.

I know that I can also use domain policies to deny logon locally on a single workstation, but it doesn't work.

Neither setting up local policies directly on the workstation. I just added the domain user in the local policy "Deny logon locally", there are no reasons to work improperly.

...any suggestions?

Thanks to everybody