Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 10 replies
  • Subscribers 1 subscriber
  • Views 6114 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Protect Computers from Enterprise Console 4

joeyl

I have the Enterprise Console 4 loaded on a domain server. I want the techs to be able to protect computers from their console. The techs do not have domain admin rights, but are part of a domain group that has local admin rights on the domain computers. When they try to protect the computers with their domain acounts it comes up with "The Specified Credentials are invalid" I can do it fine using my domain admin account. I gave the techs rights to all Sophos related folders and registry keys but it still would not work. If I make the techs local admin on the Sophos server it works fine. Is there a workaround so that I don't have to give them admin rights on the server?

thanks

:2352


This thread was automatically locked due to age.
Parents
  • 0

    Hi Christian, thanks for putting me in the right direction!

    Do you mean if the group can log on locally to the server itself in GP? If this is the case, then no, only administrators and domain admins are explicitly allowed to log on locally to the Sophos Server. And I did see the error when I tried a non-domain admin account:

    Failure Reason:        The user has not been granted the requested logon type at this machine.
        Status:            0xc000015b
        Sub Status:        0x0

    I cannot add the group to log on locally in Gpedit though, the option to add is greyed out

    :2464
Reply
  • 0

    Hi Christian, thanks for putting me in the right direction!

    Do you mean if the group can log on locally to the server itself in GP? If this is the case, then no, only administrators and domain admins are explicitly allowed to log on locally to the Sophos Server. And I did see the error when I tried a non-domain admin account:

    Failure Reason:        The user has not been granted the requested logon type at this machine.
        Status:            0xc000015b
        Sub Status:        0x0

    I cannot add the group to log on locally in Gpedit though, the option to add is greyed out

    :2464
Children
No Data
Unfiltered HTML