Re: Win2000 Terminal Server Logons not permitted

From: Alan Sterling [MSFT] (Alanst_at_online.microsoft.com)
Date: 02/05/04 

Date: Thu, 5 Feb 2004 16:09:18 -0500

FranW

We need to find out if the settings you made are changed when the users
cannot logon. If they are, one DC may be overwriting the policy changes
made on the other. 

-- 
Alan Sterling---MCSE
Windows 2000 Directory Services
English - This posting is provided "AS IS" with no warranties, and confers
no rights. OR if you wish to include a script sample in your post please add
"Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm"
"Chriss3" <noSpamHere@chrisse.se> wrote in message
news:efs61NC7DHA.2628@TK2MSFTNGP10.phx.gbl...
> Is the terminal server also a Domain Controller?
>
> -- 
> Regards,
>
> Christoffer Andersson
> No email replies please - reply in the newsgroup
> If the information was help full, you can let me know at:
> http://www.itsystem.se/employers.asp?ID=1
>
> "FranW" <anonymous@discussions.microsoft.com> skrev i meddelandet
> news:ad4401c3ec14$2b6d72c0$a001280a@phx.gbl...
> > We have done that but it doesnt remain in effective rights.
> > >-----Original Message-----
> > >Set this option to Domain Users...
> > >Log on locally
> > >Computer Configuration\Windows Settings\Security
> > Settings\Local
> > >Policies\User Rights Assignment
> > >
> > >To allow a user to log on locally to a domain controller,
> > you have to grant
> > >this right by means of the Default Domain Controller GPO
> > >
> > >
> > >-- 
> > >Regards,
> > >
> > >
> > >Christoffer Andersson
> > >No email replies please - reply in the newsgroup
> > >If the information was help full, you can let me know at:
> > >http://www.itsystem.se/employers.asp?ID=1
> > >
> > >"Fran W" <anonymous@discussions.microsoft.com> skrev i
> > meddelandet
> > >news:adce01c3ec03$f9092910$a601280a@phx.gbl...
> > >> We have a new Win2000 domain with 2 servers.  One is the
> > >> DNS server running SQL server and the other is a
> > terminal
> > >> server running Citrix Metaframe.  When we try to logon
> > >> users we get the following message "The local policy of
> > >> this system does not permit you to logon interactively."
> > >> All users can logon to the first server but not the
> > >> terminal server.
> > >>
> > >> We have changed permissions in Domain Security Policy,
> > >> Local Security Policy, and Domain Controller Security
> > >> Policy and the users are able to logon for a few
> > minutes.
> > >> But then get the same message as above.  We changed from
> > >> mixed mode to native mode and again worked immediately
> > but
> > >> again we received the same error after waiting awhile.
> > The
> > >> changes do not remain in Effective policy.
> > >>
> > >> Has anyone out there had this problem?  Does anyone
> > have a
> > >> suggestion?  We would really appreciate your responses.
> > >> Thanks
> > >
> > >
> > >.
> > >
>
>

Relevant Pages

  • RE: Cant set Local Security policies. They fail to save
    ... predefined Security Template on SBS 2003 to restore security groups ... run "gpupdate.exe /force" under command prompt to force the policy ... reboot the Server to test. ... and then logon to client computer to test if user can save system logs. ...
    (microsoft.public.windows.server.sbs)
  • Domain Controller Security Policy errors
    ... Security Policy or the Domain Controller Security Policy. ... The DC is also a print and file server. ... The domain controller for Group Policy operations is not available. ...
    (microsoft.public.win2000.active_directory)
  • RE: Lost TS to SBS2003 Server
    ... I found my issue - the Default Domain Controller Group Policy did not have ... Paul Bockmann ... To log on to this remote computer, you must have Terminal Server User ... However when you logon locally, the error "The local policy of this system ...
    (microsoft.public.windows.server.sbs)
  • Re: Unable to use Remote desktop
    ... When trying to connect to a W2K domain controller running Terminal ... Services with Application Server mode for user access, you as a TS user may ... receive "The local policy of this system does not permit you to logon ...
    (microsoft.public.windowsxp.network_web)
  • Re: logon from the server machine !
    ... >The default Domain Controller policy in Windows Server ... >Security Policy setting. ... Allow Local Logon ...
    (microsoft.public.windows.server.general)