Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have Windows Essential Business Server 2008 up and running after upgrading from a Windows 2003 domain. Everything is working fine, except new users! Every time I add a new user, I set the log on to restrictions to allow them to log into any computer. As soon as they log into one machine and then log out, the now get restricted to just the servers in our domain, not any of the workstations. I can't seem to find a policy that has this setting. How do I get this to not reset those log on to restrictions?

share|improve this question
Have you run RSOP.msc against the system/user in question to ensure no preventative policies are being set? – techie007 Jan 25 '10 at 21:52
I ran it against his account and it shows that the Allow Log on Locally is set to Domain Users. The problem isn't in that machine, it's in the actual user account. If I set it to say that they can log onto All Computers, the next time they log off from any machine in the building, it gets set back to a restriction to just server machines. I don't see anything off hand that would do this in RSOP. – TheCodeMonk Jan 26 '10 at 17:27
up vote 0 down vote accepted

I think I found the issue. I didn't assign any CALs to the 3 new users I added. As I assigned the licenses, the setting was set back to All Computers.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.