My win2k server is a stand alone server and not joined to any domain.When I try to logon, the error "the local policy of this system does not permit you to logon interactively" displays ???? Please help!
well if you can access the server remotely, see if you can open up the local policies on the server and add yourself to the logon locally option. Use the mmc and add the group policy snapin, then select the computer you want to use.
With the server running as a stand alone server, the ONLY user that will be allowed to log on locally is the Administrator account, unless a user has been given specifically the permission to log on locally (which is what "interactive" means), and has a local user account. Servers, by default, deny local access to all users except the Administrator. Being in the administrators group on this system still means you need a local user account, and you must have local access turned on before you can log on locally.
Log on as the Administrator account, go to the control panel, administrative tools, and select local security policy. When the local security settings window comes up, select local policies, User rights assignment, and make sure the user account you are trying to use is listed as being allowed to log on locally. While you are there, set the permissions on your local account for local access and any other things your account will need to do.
If you can not access with the Administrator account, or can not remember the password used when the system was built (try a blank just for kicks!), then you will need to re-install the OS and make sure you remember the administrator's password for future access!
Remote Users should be able to access the server from the network, but since this server is not in a Domain, the remote user MUST first have a local users account set up in order to be allowed access.
Actually if you have an account in the local administrators group you can logon locally. You do not need to grant that user logon locally rights explicitly. By default the local administrators group is already listed in the logon locally policy.
My guess is someone removed all the entries from there in an attempt to "secure" the server more.
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.