Windows 2000 Server Logon Problem

From: pbasham (anonymous_at_discussions.microsoft.com)
Date: 04/14/04


Date: Tue, 13 Apr 2004 17:01:10 -0700

Jim

I assume you have promoted this Win2k server to a domain
controller.

On the server, logon with administrative rights
Point Start-Programs-Admin Tools-Domain Controller
Security Policy.
Expand Local Policies-User Rights Assignments.
In the right pane scroll to Log on Locally, right click
and choose security. Here you can add users or groups with
permission to log on to the DC.

Hope this helps
Paul
>-----Original Message-----
>I have setup a Windows 2000 Server that I intend to
>eventually load Terminal Services on to. I have joined
>the domain and can logon both locally and onto the
network.
>as long as it's as an Administrator.
>
>The problem I'm having is that I can not add a user and
>have them logon with anything less then Administrator
>Rights. If I do, I get a message that says,
>
>"The Local Policy of this system does not permit you to
>logon interactively".
>
>If I set the user as an Administrator, they can logon
>without any problem... But I can't allow that.
>
>I have searched the local policy settings and haven't
been
>able to locate the correct setting. Please point me in
the
>right direction.
>
>Thank you,
>Jim
>
>.
>



Relevant Pages

  • Re: Please help refresh my memory on AD DC
    ... When I boot my Laptop I reach the Logon screeen for XP Laptop and here I am ... administrator account. ... account to be able to Login so I can control it from the DC. ... A Server has websites already hosted on it in a Workgroup and now I join it ...
    (microsoft.public.windows.server.active_directory)
  • Re: Please help refresh my memory on AD DC
    ... "WEB308\administrator" does not longer exist, because DC's have no local administrator. ... The computer is now member of the domain, if you mean this and still has the local user account. ... "in order to add the server or pc I would have to have a user on the domain to logon to the domain. ... To Logon locally I would use the admin account of the Server 2003 machine. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Please help refresh my memory on AD DC
    ... they just get the result of that what the domain administrator ... They however cannot logon directly to the physical DC machine. ... administrator account. ... A Server has websites already hosted on it in a Workgroup and now I ...
    (microsoft.public.windows.server.active_directory)
  • Re: Please help refresh my memory on AD DC
    ... The users will not see anything of that basically, they just get the result of that what the domain administrator or equivalent configures there. ... They however cannot logon directly to the physical DC machine. ... administrator account. ... A Server has websites already hosted on it in a Workgroup and now I ...
    (microsoft.public.windows.server.active_directory)
  • Re: Fax in Win2k3
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... Please do not send email directly to this alias. ... > The first DC was a win2k standard server. ... >>> The message always indicates to talk to my fax administrator, ...
    (microsoft.public.win2000.fax)