Add Local User On Domain Controler

9 Feb 2006 3:31 PM

Martin McNally

Is it possible to add a local user that can logon to the domain controler
only? So they would not be logging onto the domain but logging onto the
computer that is the domain controler i.e. Domain on the login screen
changed to SERVERNAME (this computer)

Thanks In Advance
Martin

9 Feb 2006 6:05 PM

Laura E. Hunter [MVP]

Only users with domain accounts can log onto a domain controller, except for
the local administrator account that's used if you need to boot into
Directory Services Restore Mode.

HTH

--
Laura E. Hunter: MVP Windows Server - Networking
All replies to newsgroup, please
Post provided as-is, no warranties expressed or implied

Show quoteHide quote

"Martin McNally" <martinmcna***@gmail.com> wrote in message
news:uBl7T3YLGHA.2336@TK2MSFTNGP12.phx.gbl...
> Is it possible to add a local user that can logon to the domain controler
> only? So they would not be logging onto the domain but logging onto the
> computer that is the domain controler i.e. Domain on the login screen
> changed to SERVERNAME (this computer)
>
> Thanks In Advance
> Martin
>

10 Feb 2006 4:31 AM

Neil Denison

A Domain Controller by definition does not have a local SAM database.
Consequently, only domain accounts exist on the server. The only time the
local SAM database is invoked is in Directory Services Restore Mode when you
log in with the original built-in administrator account.