Microsoft KB Archive/294192

= XCCC: How to Assign 'Log On locally' Rights on a Windows 2000 Domain Controller =

Article ID: 294192

Article Last Modified on 10/28/2006

-

APPLIES TO


 * Microsoft Outlook Web Access 5.5, when used with:
 * Microsoft Windows 2000 Standard Edition

-



This article was previously published under Q294192



SUMMARY
When you configure Outlook Web Access (OWA), the Everyone group requires the &quot;Log on locally&quot; user right on the computer that is running Internet Information Services (IIS). If IIS is running on a Windows 2000 domain controller, the &quot;Log on locally&quot; user right must be assigned at the organizational unit level or the &quot;Log on locally&quot; user right is overwritten by the effective policies at the Local, Site, and Domain levels, which are disabled or null by default.



MORE INFORMATION
To assign the Everyone group &quot;log on locally&quot; user rights on a Windows 2000 domain controller:
 * 1) Click Start, point to Programs, point to Administrative Tools, then click Domain Controller Security Policy.
 * 2) Click to expand the Security Settings node.
 * 3) Click to expand the Local Policies node.
 * 4) Click User Rights Assignment.
 * 5) In the Details pane, double-click Log on locally, and then click the Everyone group.
 * 6) Close the Domain Controller Security Policy window.
 * 7) Click Start, click Run, type secedit /refreshpolicy machine_policy, and then click Enter.

Keywords: kbinfo KB294192

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.