Logon Error

[UNIX72]

Using windows XP/windows 2000 professional with windows 2003 server. I have created two user accounts (joe and doe) with administrator rights. At first i was able to logon wtih Joe and Doe, now i am getting error when logging on with doe. Error states "The local policy of this system does not permit you to logon interactively" When i logon with administrator or Joe account works just fine, but Doe or any other user account i created receives error. I tried different computers still the same. There are no policys or scripts running on server. Please help, any suggestions. Thanks.

 

[mlichstein]

Are you trying to log on to the client or the server?

Only users that are members of certain groups (administrators, server operators, etc) are allowed to logon locally to a server.

 

[tfg13]

I hear you say that you are running no policies. One thing you may need to check, and that is whether the security log is full. If it is, clear it, and reboot the machine. If you are able to log on, let us know so we can point you to the local policy to disable the logon error you are receiving.

 

[UNIX72]

Hey guys thanks for the quick, reply. I'm trying to logon to server from client(XP or 2000 pro). tfg13 i clear the security log on server and rebooted, still same error. I forgot to mention i do have a simple script to map drives, script works fine but i don't see how that can cause this error. Any suggestions? Thanks so much

 

[UNIX72]

Updated information - Any user i create belonging to administrators or domain admins group can logon from any workstation just fine, but any user that belongs to domain users or any other non-admin group can't logon,receives error. I check user assignment rights for access this computer(server) and everything looks ok. Any suggestions. Thanks

 

[tfg13]

What does your local policy state as far as the setting for "allow logon through Terminal Services"?

Check out this link for additional Terminal services info:

http://www.microsoft.com/windowsserver2003/techinfo/overview/tsremoteadmin.mspx

 

[UNIX72]

Allow logon through Terminal Services" is enable for domain users, still no luck. Any clues, thanks

 

[tfg13]

I'm assuming that you have domain users able to "access this computer from the network" as well. Just for a test purpose, add domain users to "allow logon locally". I believe this setting has to be enabled when using Terminal Services. Let us know.

 

[BBGCORP]

I ran into this problem on a Win2K server and I had to modify the GP as follows:
Computer Configuration->Windows Settings->Security Settings->Local Policies->User Rights Assignment->Allow Log on Locally----change this to include <Everyone>

 

[UNIX72]

Hey dlctsmith, thanks for the advice but the option is grey out, how can i enable it, thanks.

 

[UNIX72]

Any suggestions, thanks

 

[tfg13]

I don't understand how the option can be greyed out.

after running start->run->gpedit.msc,

Computer Configuration->Windows Settings->Security Settings->Local Policies->User Rights Assignment->Allow Log on Locally----change this to include <Everyone>

There should be no way that the option can be greyed out. This is a setting in your local group policy.

 

[UNIX72]

Thanks tfg13, work just fine ,but I needed to go under domain controller security policy. Thanks again.

 

[theguru97321]

I am having this issue, except it's on the SERVER it's self. I just upgraded to Service Pack 2, and now I can not login locally with ANY user. I can Remote Desktop into the server. Help!

The DOMAIN Controller Pocily was already set to allow EVERYONE for local logon.

 

[theguru97321]

NEVER MIND! I just had a brain fart. and Check to see what groups where DENIED LOCAL LOGIN, and there was a group that everyone is part of, so I removed it, and BANG works fine now. LATER

 

[mlichstein]

Next time start a new thread instead of resurrecting a thread that is over a year old.