Re: Remote Desktop Connection installation

Tech-Archive recommends: Fix windows errors by optimizing your registry


you may need to refresh the policy. quoted from http://www.ChicagoTech.net

"The local policy of this system does not permit you to logon interactively."

Symptoms: When trying to connect to a W2K domain controller running Terminal Services with Application Server mode for user access, you as a TS user may receive "The local policy of this system does not permit you to logon interactively" message. You may not receive this message if you logon with a member of the following default groups:

  • Account Operators
  • Administrators
  • Backup Operators
  • Print Operators
  • Server Operators
  • Others based on services on the computer such as TsInternetUser

Also,  you will not receive this message when you logon member and stand-alone servers since they have the users group included in the "Log on Locally" user right.

Resolutions:This issue occurs because the W2K domain controller running Terminal Services does not have the Users, Authenticated Users, or Everyone global group added to the Group Policy Object for the "Log on Locally" user right. "Log on Locally" is a required user right in Microsoft Windows NT 4.0, Terminal Server Edition and Windows 2000 Terminal Services. To modify the Group Policy Object for the domain controller, go to Administrative Tools>Domain Controller Security Policy>Security Settings>Local Policies>User Rights Assignment>Policy>Log on Locally>Add>Browse, click the appropriate group, and then click Add. After modifying the Group Policy, type secedit /refreshpolicy machine_policy /enforce at a command prompt, press ENTER, and then press ENTER.

 
Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, Remote Access on http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.
I'm attempting to set up RDP in a windows xp pro environment. There is a
windows 2000 domain controller on the network. I've setup rdp on a few of the
xp pro machines and I get "The local policy of this system does not allow you
to log on locally".
I've modified the security policy on the machines to allow log on locally.
I've done the same thing on the domain controller in the domain security
policy. I've also added users to the rdp users group locally on the machines.
I still get the same log on message. I've done this before with no problem in
windows xp rpo/ win 2003 server environments.What have I missed?
Thanks in advance.

"Robert L [MS-MVP]" wrote:

> do search mstsc.exe which is located in windows\system32. Then copy a shortcut. For more and other information, go to http://howtonetworking.com.
>
> Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.
>
> Bob Lin, MS-MVP, MCSE & CNE
> How to Setup Windows, Network, Remote Access on http://www.HowToNetworking.com
> Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
> This posting is provided "AS IS" with no warranties.
> I recommend Brinkster for web hosting!
>
>   "Waseem" <Waseem@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:7B3604B0-417B-47B6-8646-D5B5B5C6E434@xxxxxxxxxxxxx...
>   I have XP Pro. I need to use RDC but When I go on Start>All Programs>
>   Accessories, There is no folder "Communications" and no link for Remote
>   Desktop connection...
>   And When I try to install it from the XP pro installation CD using the
>   Option "Perform additional Task" and then "Set up Remote Desktop Connection".
>   It starts installation but ends up with this error message "Remote Desktop
>   connection can not be installed because your operating system already has a
>   built-in version. See more Programs]Accessories\Communications\Remote Desktop
>   Connection on your Start Menu"
>   and When I click the Accessories, I do not see the folder "Communication".
>   I would be grateful if some one could help me in this regard,
>   Thanks
>   Waseem

Relevant Pages

  • RE: The local policy of this system does not permit you to logon interactively
    ... "The local policy of this system does not ... permit you to logon interactively". ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: XP Login
    ... If you have access to the affected computer via a LAN connection, from a Windows XP or Windows 2000 machine: ... Once you've determined the correct SID for your user account, right click the appropriate subkey and select Export. ... I> get the message "The Local Policy of This System Does Not> Permit You to Logon Interactively". ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Cannot logon to server
    ... You try to logon the server, you get "The local policy does not permit ... Double-click the Local Policy branch to expand it, ...
    (microsoft.public.windows.server.sbs)
  • Re: Locked out of W2K
    ... > not a users machine). ... I applied a local security policy restricting logon ... Assuming this is in the local policy and not domain policy, ... Windows 2000/XP/NT computer, or by installing a second copy of Windows ...
    (microsoft.public.win2000.security)
  • RE: Remote Desktop question
    ... The local policy of this system does not permit you to logon interactively. ... 289289 Remote desktop connection "The local policy of this system does not ... Microsoft Online Partner Support ...
    (microsoft.public.windowsxp.work_remotely)