Re: Unable to use Remote desktop

From: Robert L [MS-MVP] (noreply_at_hotmail.com)
Date: 03/19/04 

Date: Fri, 19 Mar 2004 11:32:15 -0600

quoted from http://www.ChicagoTech.net
"The local policy of this system does not permit you to logon
interactively."
Symptoms: When trying to connect to a W2K domain controller running Terminal
Services with Application Server mode for user access, you as a TS user may
receive "The local policy of this system does not permit you to logon
interactively" message. You may not receive this message if you logon with a
member of the following default groups:
  a.. Account Operators
  b.. Administrators
  c.. Backup Operators
  d.. Print Operators
  e.. Server Operators
  f.. Others based on services on the computer such as TsInternetUser
Also, you will not receive this message when you logon member and
stand-alone servers since they have the users group included in the "Log on
Locally" user right.

Resolutions:This issue occurs because the W2K domain controller running
Terminal Services does not have the Users, Authenticated Users, or Everyone
global group added to the Group Policy Object for the "Log on Locally" user
right. "Log on Locally" is a required user right in Microsoft Windows NT
4.0, Terminal Server Edition and Windows 2000 Terminal Services. To modify
the Group Policy Object for the domain controller, go to Administrative
Tools>Domain Controller Security Policy>Security Settings>Local
Policies>User Rights Assignment>Policy>Log on Locally>Add>Browse, click the
appropriate group, and then click Add. After modifying the Group Policy,
type secedit /refreshpolicy machine_policy /enforce at a command prompt,
press ENTER, and then press ENTER. 

-- 
For more and other information, go to  http://www.ChicagoTech.net
Don't send e-mail or reply to me except you need consulting services. 
Posting on MS newsgroup will benefit all readers and you may get more help.
Robert Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN, Anti-Virus, Tips & Troubleshooting on 
http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.
"Mattias" <larsyxa@hotmail.com> wrote in message 
news:E22F3915-4363-4D63-B04C-D446109DBF3C@microsoft.com...
>I also have a similar problem with Remote desktop. I CAN access the 
>computer but when tryin to login a messagebaox
> appears saying "Unable to login interactivtily!".. Whats that!!
>
> ->Lena to get your ip-adress, just start Command (cmd.exe) and write 
> ipconfig. There you'll se your ipadress..

Relevant Pages

  • RE: Cant set Local Security policies. They fail to save
    ... predefined Security Template on SBS 2003 to restore security groups ... run "gpupdate.exe /force" under command prompt to force the policy ... reboot the Server to test. ... and then logon to client computer to test if user can save system logs. ...
    (microsoft.public.windows.server.sbs)
  • Domain Controller Security Policy errors
    ... Security Policy or the Domain Controller Security Policy. ... The DC is also a print and file server. ... The domain controller for Group Policy operations is not available. ...
    (microsoft.public.win2000.active_directory)
  • Re: Win2000 Terminal Server Logons not permitted
    ... > Is the terminal server also a Domain Controller? ... When we try to logon ... >>>> We have changed permissions in Domain Security Policy, ...
    (microsoft.public.win2000.group_policy)
  • RE: Lost TS to SBS2003 Server
    ... I found my issue - the Default Domain Controller Group Policy did not have ... Paul Bockmann ... To log on to this remote computer, you must have Terminal Server User ... However when you logon locally, the error "The local policy of this system ...
    (microsoft.public.windows.server.sbs)
  • RE: Problems importing template and others..
    ... My main problem is how do I apply the template to my entire domain group ... controllers OU, expect for the server. ... small business and want to make a group policy for everyone, ... if you import on a domain controller a security template will be applied ...
    (microsoft.public.windows.group_policy)
Loading