Wednesday, October 13, 2010

Allowing a Normal User to Shutdown Domain Controller/Server

# Allowing Normal User to Login into Domain Controller and Shutdown interactively
Open The Group Policy Managment Console
Choose Default Domain Controller Polcy - Domain Controllers which is under your domain-Domain -Forests
Right click on Default Domain Controller Policy and choose Edit
Under Computer Configuration - Polcies - Windows Settings - Security Settings -> Local Policies - Usr Rights Assignments - Choose the following two options and add the normal user whom you want to
1.Allow Log on Locally
2. Shutdown The System

Select these and choose Add User/Group and choose the restricted user we created

And now tts time to check whether user can login and shutdown . Pls note your server will be shutdown and services will be disrupted so be careful when you test

Friday, April 9, 2010

Adding Shared Printer which is not part of domain to a system which is connected to domain

Can Not add shared printer on the system  which is connected to domain and users log in with domain id and password

When you try to add the shared printer which is connected to an system which is not part of domain, as a domain user you may get a message sayign a Policy on this system is preventing you to join the print queue
Ever got this situation?
So after some googling I found its bcoz of a default domain policy which is preventing printers to be added to system if the system is part of domain
So solution is to add this print server to the list of servers which can be available to the domain users as shared printer

To get it
Open the Group Policy Editor
Default Domain Policy
User Configuaration
     Administrative Templates
    Control Panel
   Printers
Point And Print Restriction
Add the IP address or fqdn of the shared printer system here, multiple can be added with coma separated

And thats it
On the system which is connected to domain just run gpupdate /force and refresh the group policy and then try to add the printer, it must go smooth this time

Thats all for now on this issue

Delay in Login screen when domain user tries to login

You might have noticed the long delay sometimes XP clients takes to login the domain user
You will have a infinite waiting screen which says "Applying computer settings"
Ok after breaking my head over I found a simple solution to it
Just disable a service " WebClient" from the Administrative Tools-> Service -> Webclient
Disable it as long as you dont need it

And see th magic of it

Wow! Simple and easy one