|
#1
01-05-2006, 04:22 AM
|
|||
|
|||
Denied Local Logon but capable of use RunAs
Is there a way to block specific account of locally logon to a machine,
but still allow that specific account to run inside RunAs environment ? i check that system event log able to identify these 2 different logon type with a value of 11 and 2. is there a way to set this combination of security in policies ? thanks! 
|
|
#2
01-05-2006, 04:23 AM
|
|||
|
|||
|
Re: Denied Local Logon but capable of use RunAs
For XP Pro open Local Security Policy and go to local policies/user rights
and add the user to the user right for deny logon locally. --- Steve "Durby vend" <someone@microsoft.com> wrote in message news:%23s9Rq9k6FHA.3588@TK2MSFTNGP15.phx.gbl... > Is there a way to block specific account of locally logon to a machine, > but still allow that specific account to run inside RunAs environment ? > > i check that system event log able to identify these 2 different logon > type > with a value of 11 and 2. > > is there a way to set this combination of security in policies ? > > thanks! >
|
|
#3
01-05-2006, 04:24 AM
|
|||
|
|||
|
Re: Denied Local Logon but capable of use RunAs
steven,
if i would to deny logon to userA, will locally logon userB able to use RunAs with UserA account ? Thanks! "Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message news:B96dnbvqno9beefeRVn-ow@comcast.com... > For XP Pro open Local Security Policy and go to local policies/user rights > and add the user to the user right for deny logon locally. --- Steve > > > "Durby vend" <someone@microsoft.com> wrote in message > news:%23s9Rq9k6FHA.3588@TK2MSFTNGP15.phx.gbl... >> Is there a way to block specific account of locally logon to a machine, >> but still allow that specific account to run inside RunAs environment ? >> >> i check that system event log able to identify these 2 different logon >> type >> with a value of 11 and 2. >> >> is there a way to set this combination of security in policies ? >> >> thanks! >> > >
|
|
#4
01-05-2006, 04:24 AM
|
|||
|
|||
|
Re: Denied Local Logon but capable of use RunAs
I believe so. Try it out and let us know. --- Steve
"Durby vend" <someone@microsoft.com> wrote in message news:OvVwd9z6FHA.4076@tk2msftngp13.phx.gbl... > steven, > if i would to deny logon to userA, > will locally logon userB able to use RunAs with UserA account ? > > Thanks! > > > "Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message > news:B96dnbvqno9beefeRVn-ow@comcast.com... >> For XP Pro open Local Security Policy and go to local policies/user >> rights and add the user to the user right for deny logon locally. --- >> Steve >> >> >> "Durby vend" <someone@microsoft.com> wrote in message >> news:%23s9Rq9k6FHA.3588@TK2MSFTNGP15.phx.gbl... >>> Is there a way to block specific account of locally logon to a machine, >>> but still allow that specific account to run inside RunAs environment ? >>> >>> i check that system event log able to identify these 2 different logon >>> type >>> with a value of 11 and 2. >>> >>> is there a way to set this combination of security in policies ? >>> >>> thanks! >>> >> >> > >
|
 |
| Thread Tools | Search this Thread |
| Display Modes | |
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Local user cannot logon after RDP session | Charles Blair | Windows XP Work Remotely | 0 | 01-05-2006 07:13 AM |
| Access Denied on Local Machine even as Admin | Milien, S. | Windows XP Security Admin | 1 | 01-05-2006 04:37 AM |
| logon script won't run without local admin rights | Travis | Windows XP Security Admin | 3 | 01-05-2006 04:16 AM |
| Logon time delay 20 second with folder redirection (Local profile) | Alan T | Windows XP Security Admin | 0 | 01-05-2006 04:16 AM |
| Long delay before Drives & Files appear in My Computer & Address Bar | shizzlenizzlator@gmail.com | Windows XP Help and Support | 3 | 01-05-2006 02:44 AM |
Linear Mode
