Why can the users in one child domain logon to computers in a different child domain in Server 2012 R2?

I have setup a test system. It has a domain with 2 child domains.  DomainA.xyz.com has users and workstations. DomainB.xyz.com is a resource domain and has servers.  wyx.com is for IT administration.
Users in domainA can logon to the domainB computers.  I searched to find out why it was so.  I found a "NT AUTHORITY\INTERACTIVE" entry in the local users group that enables this.
This is rather confusing.  1.  When a user enters his credentials, he is not logged on and therefore would not be "INTERACTIVE" at that time.  2.  If everybody that signs on a computer is interactive, then does that mean
everyone in the forest can sign on?
So my issue is: Can I delete the "INTERACTIVE" entry in the local users group and not cause any problems?  I want to protect the resource domain from users signing on to them and give them access to the resources they need.

Hi,
The Interactive group includes all users that have logged on locally.
In addition, it is not recommended to remove the
interactive group from the local user group since it would cause all kinds of problems. For more detailed information, please refer to the similar thread and link below:
Interactive
group
Staring
at a blank desktop, due to Interactive missing from Users group
Best regards,
Susie

Similar Messages

  • Why can i see only one picture in the illustration windows with iTunes 10.5.1?

    why can i see only one picture in the illustration windows since iTunes 10.5.1?

    Assuming Apple doesn't eviscerate the files of the secondary graphics with another upgrade, there could be a plug in that reads the graphic and runs along side iTunes..we should get someone or Apple to program an alternative If we have to accept this downgrade in iTunes proper.
    I've developed a quick workaround, and am still hoping Apple will fix this!
    Go To Get Info on the tune you want to see secondary artwork for.
    Go To the Artwork tab
    Drag the back cover to the desktop, and it will create a new jpg you can open with quick viw or prieview where you can see it large!
    you end up with a lot of jpgs on the desktop to discard!

  • Is it possible to restrict the user from creating a sibling and allow him to ONLY create child nodes in DRM?

    When in a hierarchy, a user right clicks on a node to crate a new node, he has two options
    -Child
    -Sibling
    Is it possible to restrict the user from creating a sibling and allow him to ONLY create child nodes?
    Business cases:
    1. different level nodes need to have different prefixes.
    - Thus, the default prefix property definition uses the level number to assign a prefix
    - Also, a validation, to ensure the correct prefix, uses the level number
    But if the user can create a child and a sibling then the default prefix will only be right for a single case and not both.
    Thanks

    If the images are exactly the same size then make sure the layer with the mask
    is the active layer and in the other documents go to Select>Load Selection and choose
    your document with the layer mask under Source document and under channel choose the layer mask.
    After the selection loads press the layer mask icon at the bottom of the layers panel.
    MTSTUNER

  • Why can I only add one app in passbook?

    Why can I only add one app (Starbucks) in Passbook? 

    You can add many passes to Passbook, what makes you think you can only add one?
    Check out http://support.apple.com/kb/HT5483.

  • Why can the microphone not be working when I speak normally and be working when I use the speakerphone?

    why can the microphone not be working when I speak normally and be working when I use the speakerphone?
    anyone has had the same problem? Thank you!!!

    Apple confirmed, it is an iphone 4S feature, that is intended for our 'benefit'.  It is being solved by each of us using headphones to over-ride the muting function.

  • Is it possible to limit the user to one session?

    Hi
    We have Oracle apps R 12.0.6, single node installation. Because of performance issues, i want to restrict the user to have only one session. Is it possible to limit the user to one session?
    Regards
    Arizuddin

    Ateeq,
    I tried to load the event and subscription according to metalink document id
    About the oracle.apps.icx.security.session.created business event. [ID 304209.1]. it says file does not exist.How to resolve this?Could you please post the command along with the complete error?
    Regards,
    Hussein

  • My AppStore id is my apple id n password which is good when purchasing. But when I am updating from update option it ask for a password. The user id I see there is not mine, it's different. How do I change that to my apple Id? Please help me resolve .....

    My AppStore id is my apple id n password which is good when purchasing. But when I am updating from update option it ask for a password. The user id I see there is not mine, it's different. How do I change that to my apple Id? Please help me resolve  this issue. I have tried resetting it but nothing... Either I'm doing something wrong or....

    I believe the issue is with the Apple ID that was used to purchase the App. If you download an App that was purchased under a different Appple ID then all updates will also be linked to the original purchaser's Apple ID. Your Apple ID is the the same ID as your iTunes, iCloud, etc. Some folks use different ID for the different Apple sites. No need for that One ID for all Apple Sites, and if someone else buys an App using their ID and they(you) download that App onto your device and that App requires an update it will ask for the purchasers Apple ID. This happens a lot when folks sell their iPad or give it to someone else and leave some purchased(free) Apps on the iOS device. You cannot change the original ID the App was purchased under. A suggestion would be if someone else has an App that you like but do not want to pay for use their ID or in the future have them gift the App to you.

  • Can the Mac Pro run Window XP (booth camp) and be used as a MAc OS server

    Hi There
    Can the Mac Pro run Window XP (booth camp) and be used as a MAc OS server in the same time?
    I am a small business and I was thinking of using the new mac pro for a new workstation on my studio and to also use it as a server for 5 work others stations. Is that possible? Or I am asking a bit to much work load to do for the Mac Pro?
    Can the Mac Pro can run under Window XP and Autocad and still be accessed by other workstation whilst working on the cad software? Is booth camp will slow the machine like Virtual PC?
    IS the MAc Pro can manage file hosting website with PHP and mySQL capabilites?
    CHARLES
    MAC PRO Mac OS X (10.4.7)

    Great question, but it appears the answer is no (at this time); they promise to work on it immediately. Check this thread at parallels.
    http://forum.parallels.com/thread3659.html
    iMAC G5 20" - 2GB RAM - 150 GB Hard Drive   Mac OS X (10.4.6)   Also MacMini & MacBook Pro Intel Core Duo - OS X & WIN2K

  • HT201272 Why can't users in the UK download the previous purchases?

    I am a UK iTunes customer. Why can't I download previuos purchases whereas the US customers can?

    You can redownload music, music videos, TV shows, apps and iBooks. The only things you can't re-download are movies and audiobooks, for which Apple has not been able to get permissions from the content owners in the UK to allow.
    Regards.

  • Why is the user agreement for Flash Player in Arabic? Most of us can't read Arabic.

    While awaiting the latest install of Flash Player, I decided to check out the user agreement:
    It opens showing a page in Arabic
    It is 304 pages long
    There is no obvious link to a table of contents
    There is no question asking what language is preferred
    I wonder whether or not this is so incompetently done that a reasonable jury would find that no user could be reasonably expected to have read or agreed to anything.
    //The link goes to page 1 of the 304 page "Personal Computer Software License Agreement", which is in Arabic. After I had worked with it and found the table of languages, the next time I opened the document, it went to the last page I had open-- page 87, which is in English (United States).  I do not ask for it to detect my language, merely offer me a choice.

    When I click that link, it goes (as it should from a U.S. IP Address) to the hyperlinked page 87, which is where the English portion begins.
    Your browser or International settings may prevent it from doing so, but I have nine machines that ALL parse the link the same way.

  • Can multiple users share one file for iphoto

    I want to be able to have all the user profiles on our iMac access the same files for iPhoto, so when one user adds photos they are there for anyone who logs on.

    For iPhoto 09 (version 8.0.2) and later:
    What you mean by 'share'.
    If you want the other user to be able to see the pics, but not add to, change or alter your library, then enable Sharing in your iPhoto (Preferences -> Sharing), leave iPhoto running and use Fast User Switching to open the other account. In that account, enable 'Look For Shared Libraries'. Your Library will appear in the other source pane.
    Any user can drag a pic from the Shared Library to their own in the iPhoto Window.
    Remember iPhoto must be running in both accounts for this to work.
    If you want the other user to have the same access to the library as you: to be able to add, edit, organise, keyword etc.
    Quit iPhoto in both accounts. Move the Library to the Users / Shared Folder
    (You can also use an external HD set to ignore permissions, a Disk Image or even partition your Hard Disk.)
    In each account in turn: Double click on the Library to open it. (You may be asked to repair the Library Permissions.) From that point on, this will be the default library location. Both accounts will have full access to the library, in fact, both accounts will 'own' it.
    However, there is a catch with this system and it is a significant one. iPhoto is not a multi-user app., it does not have the code to negotiate two users simultaneously writing to the database, and trying will cause db corruption. So only one user at a time, and back up, back up back up.

  • Why can the explain plan be different from 2 exact set of structures

    hi,
    i have from a view some base tables let's say A , B, C & D
    this query is running very slow . so from the same database , i created tables A1 , B1, C1,& D1 from the above tables.
    i created some new indexes on A1 to D1 tables and the results returned to me is fast.
    i did an exlain plan
    so i drop the indexes on the original A to D table and created the new indexes as per A1 to D1 and analyzed them. and i also did an explain plan
    but the query is still running slow and also the explain plan is different to the one from A1 to D1 (the one that running fast)
    pls help me to understand how/why can this happen ?
    tks & rdgs

    hi,
    precisely i could have been providing insufficient information but i am too inexperienced to be able to give you the required information and i am also not very sure where i could get the info so that you all can advise me further.
    but this is from the user_tables , the only difference i see is that
    under LOGGING table A to E is 'YES'
    TABLE_NAME     TABLESPACE_NAME     PCT_FREE     LOGGING     BACKED_UP     NUM_ROWS     BLOCKS     CACHE     TABLE_LOCK     PARTITIONED
    A1          OWNER1          10          NO          N     37332          883         N     ENABLED     NO
    B1          OWNER1          10          NO          N     43458          861         N     ENABLED     NO
    C1          OWNER1          10          NO          N     823828          7826         N     ENABLED     NO
    D1          OWNER1          10          NO          N     881176          14646         N     ENABLED     NO
    E1          OWNER1          10          NO          N     18868          223         N     ENABLED     NO
    A          OWNER1          10          YES          N     37040          880         N     ENABLED     NO
    B          OWNER1          10          YES          N     43386          880         N     ENABLED     NO
    C          OWNER1          10          YES          N     823820          7684         N     ENABLED     NO
    D          OWNER1          50          YES          N     880948          26624         N     ENABLED     NO
    E          OWNER1          10          YES          N     18690          244         N     ENABLED     NOtks & rdgs

  • Can the user exit  EXIT_SAPMM07M_004 be called from an FM exit in my code?

    Hi ,
    When I create a Goods Receipt by tx MB1C , an MM adapter(FM user exit) is kicked off in my workspace creating documents wrt to that goods receipt.However if a batch does not exist during MB1C , it says that a batch would be created.But when i do a save , the user exit is kicked off before it returns to the SAP code to create a batch.As a result no MM documents are created in my workspace.Now I want that the batch be created while in my user exit and I want to implement the customer user exit EXIT_SAPMM07M_004(for copying the batch characteristics) .Is it possible to call this exit from my code?Kindly suggest.

    > When I create a Goods Receipt by tx MB1C , an MM adapter(FM user exit) is kicked off in my workspace creating documents wrt to that goods receipt.However if a batch does not exist during MB1C , it says that a batch would be created.But when i do a save , the user exit is kicked off before it returns to the SAP code to create a batch.As a result no MM documents are created in my workspace.Now I want that the batch be created while in my user exit and I want to implement the customer user exit EXIT_SAPMM07M_004(for copying the batch characteristics) .Is it possible to call this exit from my code?Kindly suggest.
    Can you call the user exit? - Yes ofcourse.... but why dont you just add the same code that is in your exit instead of calling the user exit?
    User exits are developed and called from appropriate places where sap can take the changes and apply to the transaction. there is no restriction on calling the user exit (atleast programmatically) but you need to think 100 times before you call the user exit.
    For example, you want to call user exit 'A' in your program because you want to use the code in this user exit in your program '1'. Why dont you just write the code in program '1' with what is in user exit 'A' ?
    Calling user exit in your program does not really helps. Better find out different ways. once again, user exits are embedded in sap business applications and remember they are not independent FM's as you think
    Good luck

  • Why can't I drag one folder into anoth

    If I create a new folder within Zen Media Explorer, why can I not drag another folder into it's
    This is how I arrange my MP3 albums on my PC ARTIST NAME folder--->ALBUM NAME folder--->MP3 TRACKS
    but when I use media explorer to transfer just one album from a multi album folder it transfers it without creating a folder of the artist name therefore I would have to do it manually, but thats isn't possible either.
    Now although this is fine on the player (if ID3 tags are completed) when I come back to media player I don't have the artist name info.
    Am I doing something wrong or has anybody else found this to be a problem
    Thanks
    DamonMessage Edited by damon33 on 0-22-2007:40 PM
    Message Edited by damon33 on 0-23-2007:24 PM

    Thanks Jerry. I just found this out by reading the "What has been lost in Numbers 3.0 upgrade" post by virtue of posing my question here ... In desperation, I downloaded FilemakerPro 13 trial and I am getting quite excited by this although I have commented to Apple that they may want to think about using the now redundant iWeb developers to build a new iWeb with DB capabilities integrating the new Numbers with all it's 09 features restored for ease of use. Will they listen? I doubt it. Ha. Cheers

  • If the iOS app I create emails the user, can the user upgrade from the link in the email or is that against the guidelines?

    I want to create an iOS app and for a variety of reasons (subscription, multiplatform, etc) I can't use the Apple app-store payment sytem. 
    However, if the user creates and account with my iOS app and we then email the user at a later date.  Can they upgrade from the link in the email, or is that against Apple policy as well? 
    Thanks!
    Ryan

    i am faceing a file download problem too..........
    i am protecting jboss application,,,,using apache, and jk....
    all work fine except for open a file(word,excel,txt,etc).
    Disable the policy domain, everything goes just fine. microsoft file dialogue opens,you can open the file directly, or save it to your computer........
    Enable the policy domain,, you can only save the file to your computer(file content is also correct),,,but cannot open it directly.it says the file path could not be found......but if the word/excel application is already running, you can open it fine...
    PS:not a computer issue,,,every computers faceing the same problem
    any avoice from you is good to me...............thanks very much

Maybe you are looking for