Assign Minimum Privileges

Due to so many links to topics everywhere, and so many repeat, duplicate topics, I am placing this comment in topics I’ve already fixed that I know are linked to a bunch or that I know I have seen a bunch and that I want to ensure aren’t duplicates or see if I can reuse something {this is the case for Enable Dir Browsing and Configure Bits}. AMS 12/2018

This step is necessary only for a distributed implementation.

These steps assign the minimum set of privileges necessary for the domain user.

  1. From the Start menu, select Administrative Tools > Local Security Policy.
    TIP: If you're using Windows 7, select Control Panel > Administrative Tools > Local Security Policy.
  2. Expand Local Policies and select User Rights Assignment.
  3. Perform steps 4-7 for the following policies in the window at the right.
    1. Access this computer from the network.
    2. Deny logon locally.
    3. Log on as a batch job.
    4. Log on as a service.
  4. Right click a policy and select Properties.

  5. Click Add User or Group.
  6. Add your domain user (e.g., miner\mmreplica).
  7. Click OK on both screens to save changes and close.
QR code for this page

Was this helpful?