Logon Interactively in XP Pro

[HSTech]

I have a dozen computers running windows XP Professional. I have two separate domains(long story) within the same network. I have joined one XP comp to one domain, and a couple more to the other domain. The first computer that i joined to "COMPLAB" domain, works fine. BUt the other computers that i joined to the "473DOM" domain gives an error. It works fine if you log in with administrative priveldges, but if you log on as a normal user, it gives the error message of sometihng along the lines of "You cannot logon interactively", so... checking with other forums and help pages, i went into the Local Security Policy on the local computer.THen under User RIghts Assignment, I checked the Logon Locally option. Thats where i should be able to add permissions for people to logon right?? NOt in my case! On this computer the whole Logon Locally option box is greyed out. So this is where my dilema leaves me, it all works on one domain, but on the other the option is greyed out. Any solutions, ideas, or where you can point out errors in my logic, I'd greatly appreciate it.

 

[jrogersnd]

HSTech,

First of all - is this a Windows 2000 Domain?

If so then try this:

Check your Security Policy for the "473DOM" domain.

Under Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment > Deny log on locally. Make sure this is set to Not Defined and Allow log on locally is set to Not Defined.

If neither of these are set in here then check your Group Policies on the OU that contains the machines you were testing.

HTH!

--James

 

[HSTech]

Yes this is a Windows 2000 domain. That is why i posted this question in the windows 2000 server forum. I am not sure what you are trying to tell me. How do u check group policies? this sounds like it may be the cause of my problem, but i'm not sure how to make or look at group policies. Also, i looked in the "Local Policies > User Rights Assignment >" but the options of Not Defined weren't present. It was just blank. Also, on the Logon Locally, i added the group my users all belong to (STUDENTS), but still no change on the XP machine. I still don't understand why the options on the XP machine are greyed out. Hope you understand what im trying to say, and sorry if i didn't understand what you were trying to say.

 

[GrnEyedLdy]

Local Security policies apply only to the local machine...(I assume you are trying to log into the domain). If there are Domain Level policies in place, they will override the policies that are defined at the Local Level.

To access group policies on your Domain:

Open Active Directory Users and Computers
Right-click the domain container, (473DOM.?)
Choose Properties
Choose the Group Policy tab
Highlight the Default Domain Policy, and choose Edit
Now follow the path suggessted by James.

P.S. Group polices can be applied to containers such as the Local Machine, a Site, a Domain, or an OU.

Each one down the line overrides the previous settings (if defined at that level).

Hope this helps