Not permitted to logon interactively

[computerMe]

Hello ...

I just created a new user.. and already a member of the domain... When I tried to logon in the workstation I got this error The local policy of this system does not permit you to logon interactively.

Any help... THANKS

 

[biglebowski]

The user needs to have local admin rights to log in locally to that machine.

When I was born I was so suprised I didn't talk for 18 months

 

[computerMe]

even in windowsXP workstation?

 

[biglebowski]

Yes if it's a domain account.

When I was born I was so suprised I didn't talk for 18 months

 

[computerMe]

Thank very much biglebowski for you time and effort I appreciate it very much. I found already the solution of my question in microsoft technet...

Here is the link.. This might help to others..

http://support.microsoft.com/kb/285793

GOOD LUCK! and GOD BLESS YOU BODY! !

 

[computerMe]

Hi, I'd followed the steps with this article of microsoft technet that wants me to move the computer in computers AD to the OU. What if I have other member from other OUs that will use the computer that I moved? Because I already move the computer to the single OU? Needs HELP.. THANKS.

 

[computerMe]

 

[computerMe]

 

[computerMe]

 

[teqmod]

Download the Group policy mgmt console. This has a tool called the "Group Policy Results wizard" in it to show you all the settings applied to a machine and what rights a user will have on that machine. A user does not necessarily have to be a member of the local admins group to log on but they must have the permission set under the local security policy to log in. Generally the Domain users is a part of the local users group. If you open the local security policy make sure the user is a member of a group that has the logon locall permission and not a member of the deny logon locally. Also make sure the user has the rights necessary to create a profile under documents and settings. If they can't create a profile you will get errors.

Another thing to try is create a basic user domain account and only add them to the bare minimum of groups. See if this user can log on. If this works compare the differences between your test account and the actual user account.

There are so many variables to your issue it is very difficult to just give you an easy answer. Consider this the beginning of the troubleshooting process.