Can't log on interactively

[ccdriver]

Beginning yesterday, our teachers and students could not log on to our domain. They got a message saying something like "The policy of this system does not allow you to log on interactively".

What caused this and how do we fix this? Details would be appreciated.

Thanks,
Charlie

 

[CNYTech]

The user attempting to log on does not have the "logon locally " permission available under Security Settings\Local Policies\User Rights Assignment\Log On Locally. Modify the appropriate Group Policy Object in your environment to grant the user or group this permission.


CNYTech

http://www.xpbbs.com

- A PC and Windows XP Support Forum

 

[ccdriver]

Just to clarify, everything was working as normal until yesterday. Of course, teachers and students have been able to log on before, now we're trying to figure out what happened. If something was changed (not by me), it was not the intended result.

Does anyone have any specifics (details please) on how to correct this.

Since it affects hundreds of computers and 800 students and teachers, the problem must be at the server.

 

[hewissa]

Giving you details as to why this happened, none of us can do. We are not there nor know the structure and make-up of your domain. That said, Group Policies have been known to do strange things. How many network admins have accesses to your servers or Active Directory?

The error, although it says interactively, does mean locally and can be applied at the server or local client level. You need to check the Default Domain Controllers policy and the Default Domain policy to see if these have been set to deny. CNYTech's advice was correct.

Hewissa

MCSE, CCNA, CIW

 

[hewissa]

I snapped....

Lets se if this points you in the right direction.

Open AD Users and Computers.

Check the Domain Policy>Right click the Domain>Properties>Group Policy> and under computer Configuration>Local Policies>User Rights Assignment>Deny Logon Locally> set to disabled....Enable the Logon Locally Right and specify Users and such.

Check the Doman Controllers Policy. Follow the steps for the the Domain Policy.

Check any other GPO that might be applied to Sites or OU's.

I hope this helps.

Hewissa

MCSE, CCNA, CIW