windows 2003 server log on problem

[yixiong]

I have set up the domain controller at windows 2003 server and configure a PC. I can log in the domain using domain user account "administrator" at the PC but I can not log in the domain using domain user account that I created. The
error information at the PC is something like the local
system does not allow log on interatively. What should I do
to solve the problem? thanks

 

[jayweb]

By default Windows Servers which have DC functions do not allow any user without administrative privileges log on. Make sure that your user belongs to the right group. You can deactivate this function by using GPO. (But I wouldn't do that.)

 

[yixiong]

>By default Windows Servers which have DC functions do not
>allow any user without administrative privileges log on.
>Make sure that your user belongs to the right group. You

make sure the user belongs to which gourp? group has administrative privileges?

>can deactivate this function by using GPO. (But I wouldn't
>do that.)

How to use GPO to deactivate DC functions? what's DC functions?

Thanks a lot