RE: Can't log on locally to XP after RDP session

Thanks for your reply and I will perform further research.

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.





--------------------
| Thread-Topic: Can't log on locally to XP after RDP session
| thread-index: Aceum6t1gge3S4fNQYenkqG5LnEM+A==
| X-WBNR-Posting-Host: 207.46.193.207
| From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <Silmarillion@xxxxxxxxxxxxx>
| References: <A076D4DE-3565-4476-BB74-54E2737BAA63@xxxxxxxxxxxxx>
<l0Yq8CzpHHA.2368@xxxxxxxxxxxxxxxxxxxxxx>
<2820B895-E820-4394-906C-B961D36CE859@xxxxxxxxxxxxx>
<TpvgwuBqHHA.3736@xxxxxxxxxxxxxxxxxxxxxx>
<eKinnaZqHHA.1032@xxxxxxxxxxxxxxxxxxxxxx>
| Subject: RE: Can't log on locally to XP after RDP session
| Date: Thu, 14 Jun 2007 08:50:02 -0700
| Lines: 317
| Message-ID: <A69E544E-8B37-41BA-836F-F22EBFA85578@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| Newsgroups: microsoft.public.windowsxp.work_remotely
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windowsxp.work_remotely:1743
| NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
|
| Sorry - I wasn't receiving notifications on this thread, so I missed your
| replies.
|
| A few things to clarify:
|
| 1) The KB article you sent me is for problems logging on to a TS. The
| problem is not with logging onto a TS, it is when logging onto XP Pro
(see
| the thread title, my original post, and the other posts in this thread).
|
| 2) We are running four servers, all of them Server 2003 (of some
flavour).
| The Terminal Server is 2003 R2 Enterprise Edition. We do not have any
| Windows 2000, NT 4.0, or Small Business Server in our environment.
|
| So so far, I still have the problem and no solution.
|
| ""Ken Zhao [MSFT]"" wrote:
|
| > Hi,
| >
| > I am just writing to see how everything is going. If you have any
updates
| > or need any further assistance on this issue, please feel free to let
me
| > know.
| >
| > Thanks & Regards,
| >
| > Ken Zhao
| >
| > Microsoft Online Support
| > Microsoft Global Technical Support Center
| >
| > Get Secure! - www.microsoft.com/security
<http://www.microsoft.com/security>
| > ====================================================
| > When responding to posts, please "Reply to Group" via your newsreader
so
| > that others may learn and benefit from your issue.
| > ====================================================
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| >
| >
| >
| >
| > --------------------
| > | X-Tomcat-ID: 123345117
| > | References: <A076D4DE-3565-4476-BB74-54E2737BAA63@xxxxxxxxxxxxx>
| > <l0Yq8CzpHHA.2368@xxxxxxxxxxxxxxxxxxxxxx>
| > <2820B895-E820-4394-906C-B961D36CE859@xxxxxxxxxxxxx>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain
| > | Content-Transfer-Encoding: 7bit
| > | From: v-kzhao@xxxxxxxxxxxxxxxxxxxx ("Ken Zhao [MSFT]")
| > | Organization: Microsoft
| > | Date: Wed, 06 Jun 2007 09:18:33 GMT
| > | Subject: RE: Can't log on locally to XP after RDP session
| > | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| > | Message-ID: <TpvgwuBqHHA.3736@xxxxxxxxxxxxxxxxxxxxxx>
| > | Newsgroups: microsoft.public.windowsxp.work_remotely
| > | Lines: 242
| > | Path: TK2MSFTNGHUB02.phx.gbl
| > | Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windowsxp.work_remotely:1669
| > | NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
| > |
| > | Hello,
| > |
| > | I found the following article about this error message. Please follow
the
| > | steps in the article to see if it can help.
| > |
| > | 265382: Error Message: Your Interactive Logon Privilege Has Been
| > Disabled.
| > | Please Contact Your System Administrator
| > | http://support.microsoft.com/default.aspx?scid=kb;en-us;265382
| > |
| > | In addition, I also want to provide you with the following methods to
see
| > | if it can help:
| > |
| > | Method 1
| > | =============
| > | I would suggest you check the Windows 2000 Server. By default the
user
| > | created through SBS Admin console does not have permissions to logon
to
| > | terminal server. Please check whether the domain user account on the
| > server
| > | have a check in the box for "Allow logon to Terminal Server." Check
the
| > box
| > | and test.
| > |
| > | Method 2
| > | =============
| > | Edit the Windows registry on the Windows 2000 terminal server so that
it
| > | causes the Winlogon process to ignore the error.
| > |
| > | 1. Click Start, click Run, type regedit in the Open box, and then
click
| > OK.
| > | WARNING: If you use Registry Editor incorrectly, you may cause
serious
| > | problems that may require you to reinstall your operating system.
| > Microsoft
| > | cannot guarantee that you can solve problems that result from using
| > | Registry Editor incorrectly. Use Registry Editor at your own risk.
| > |
| > | 2. Locate the following registry subkey:
| > | HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server
| > |
| > | 3. On the Edit menu, point to New, and then click DWORD Value.
| > | 4. In the New Value #1 box, type IgnoreRegUserConfigErrors, and then
| > press
| > | ENTER.
| > | 5. Right-click IgnoreRegUserConfigErrors, and then click Modify.
| > | 6. In the Value data box, type 1 (one), click Decimal, and then click
OK.
| > |
| > | For more information, please refer to the link below:
| > | 815266: "Your Interactive Logon Privilege Has Been Disabled" Error
When
| > You
| > | Try to Log on to a Terminal Server
| > | http://support.microsoft.com/default.aspx?scid=kb;en-us;815266
| > |
| > | Hope that helps!
| > |
| > | Thanks & Regards,
| > |
| > | Ken Zhao
| > |
| > | Microsoft Online Support
| > | Microsoft Global Technical Support Center
| > |
| > | Get Secure! - www.microsoft.com/security
| > <http://www.microsoft.com/security>
| > | ====================================================
| > | When responding to posts, please "Reply to Group" via your newsreader
so
| > | that others may learn and benefit from your issue.
| > | ====================================================
| > | This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| > |
| > |
| > |
| > |
| > | --------------------
| > | | Thread-Topic: Can't log on locally to XP after RDP session
| > | | thread-index: AcenfL20DwaxQErORZaDyIon+YJ5Vw==
| > | | X-WBNR-Posting-Host: 207.46.193.207
| > | | From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <Silmarillion@xxxxxxxxxxxxx>
| > | | References: <A076D4DE-3565-4476-BB74-54E2737BAA63@xxxxxxxxxxxxx>
| > | <l0Yq8CzpHHA.2368@xxxxxxxxxxxxxxxxxxxxxx>
| > | | Subject: RE: Can't log on locally to XP after RDP session
| > | | Date: Tue, 5 Jun 2007 07:21:00 -0700
| > | | Lines: 152
| > | | Message-ID: <2820B895-E820-4394-906C-B961D36CE859@xxxxxxxxxxxxx>
| > | | MIME-Version: 1.0
| > | | Content-Type: text/plain;
| > | | charset="Utf-8"
| > | | Content-Transfer-Encoding: 7bit
| > | | X-Newsreader: Microsoft CDO for Windows 2000
| > | | Content-Class: urn:content-classes:message
| > | | Importance: normal
| > | | Priority: normal
| > | | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| > | | Newsgroups: microsoft.public.windowsxp.work_remotely
| > | | Path: TK2MSFTNGHUB02.phx.gbl
| > | | Xref: TK2MSFTNGHUB02.phx.gbl
| > microsoft.public.windowsxp.work_remotely:1664
| > | | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| > | | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| > | |
| > | | The full message is:
| > | |
| > | | Logon Message
| > | | Your interactive logon privilege has been disabled. Please contact
| > your
| > | | system administrator.
| > | |
| > | | ""Ken Zhao [MSFT]"" wrote:
| > | |
| > | | > Hello Glen,
| > | | >
| > | | > Thank you for using newsgroup!
| > | | >
| > | | > From your post, what is the exact error message?
| > | | >
| > | | > Thanks & Regards,
| > | | >
| > | | > Ken Zhao
| > | | >
| > | | > Microsoft Online Support
| > | | > Microsoft Global Technical Support Center
| > | | >
| > | | > Get Secure! - www.microsoft.com/security
| > | <http://www.microsoft.com/security>
| > | | > ====================================================
| > | | > When responding to posts, please "Reply to Group" via your
newsreader
| > | so
| > | | > that others may learn and benefit from your issue.
| > | | > ====================================================
| > | | > This posting is provided "AS IS" with no warranties, and confers
no
| > | rights.
| > | | >
| > | | >
| > | | >
| > | | >
| > | | >
| > | | > --------------------
| > | | > | Thread-Topic: Can't log on locally to XP after RDP session
| > | | > | thread-index: Acemt30w/2CYl1XsQpCVm0szl5iigw==
| > | | > | X-WBNR-Posting-Host: 207.46.193.207
| > | | > | From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <Silmarillion@xxxxxxxxxxxxx>
| > | | > | Subject: Can't log on locally to XP after RDP session
| > | | > | Date: Mon, 4 Jun 2007 07:49:01 -0700
| > | | > | Lines: 78
| > | | > | Message-ID: <A076D4DE-3565-4476-BB74-54E2737BAA63@xxxxxxxxxxxxx>
| > | | > | MIME-Version: 1.0
| > | | > | Content-Type: text/plain;
| > | | > | charset="Utf-8"
| > | | > | Content-Transfer-Encoding: 7bit
| > | | > | X-Newsreader: Microsoft CDO for Windows 2000
| > | | > | Content-Class: urn:content-classes:message
| > | | > | Importance: normal
| > | | > | Priority: normal
| > | | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| > | | > | Newsgroups: microsoft.public.windowsxp.work_remotely
| > | | > | Path: TK2MSFTNGHUB02.phx.gbl
| > | | > | Xref: TK2MSFTNGHUB02.phx.gbl
| > | microsoft.public.windowsxp.work_remotely:1652
| > | | > | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| > | | > | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| > | | > |
| > | | > | Sorry about the new thread - see background info below.
| > | | > |
| > | | > | I still don't see a fix for this issue. Another bit of
information
| > -
| > | I
| > | | > am
| > | | > | able to log on at the console as a domain admin when the
problem
| > | appears.
| > | | > If
| > | | > | I then log off, the non-admin user is able to log on without
| > | encountering
| > | | > the
| > | | > | error.
| > | | > |
| > | | > | The problem we have is that we do not want to enable Terminal
| > | Services
| > | | > logon
| > | | > | in AD, as we are using it to restrict non-TS users from logging
on
| > to
| > | our
| > | | > TS.
| > | | > | So that workaround does not work for us.
| > | | > |
| > | | > | Another question: Is there any way to apply the TS
restrictions in
| > | AD to
| > | | > | just the Terminal Server, as opposed to having it affect
everyone
| > who
| > | | > uses
| > | | > | RDP to come into an XP host? We use TS and XP RDP hosts for
| > | different
| > | | > | purposes, and we would like to restrict who logs onto the TS.
| > Right
| > | now,
| > | | > | when we disable a user's TS logon privilege in AD, it also
prevents
| > | them
| > | | > from
| > | | > | logging onto an XP RDP host.
| > | | > |
| > | | > | Glen
| > | | > |
| > | | > | Hello,
| > | | > |
| > | | > | It seems you are replying another post this newsgroup. If you
have
| > | any
| > | | > | questions, please feel free to submit your question.
| > | | > |
| > | | > | Thanks & Regards,
| > | | > |
| > | | > | Ken Zhao
| > | | > |
| > | | > | Microsoft Online Support
| > | | > | Microsoft Global Technical Support Center
| > | | > |
| > | | > |
| > | | > | I have seen the same "BUG". Here's the scenario:
| > | | > |
| > | | > | User A is logged into her XP Pro SP2 Dell Desktop. She requests
| > | | > | software to be installed and I use RDC to logon to her computer
| > | | > | remotely using the administrator account to complete the
request. I
| > | | > | log off and then she tries to logon locally JUST AS SHE WAS
PRIOR
| > TO
| > | MY
| > | | > | REMOTE LOGIN, and she gets the "Your logon privilege has been
| > | disabled"
| > | | > | error message. This error message is for TERMINAL SERVICES
LOGONS
| > but
| > | | > | NOT FOR LOCAL LOGONS. So...why are we getting this message?
| > | | > |
| > | | > | THe work-around above "allow logon to terminal server" in the
AD
| > Users
| > | | > | and Computers app masks the bug. It appears that once a remote
| > login
| > | | > | takes place using RDC that the subsequent LOCAL logins use the
| > REMOTE
| > | | > | DESKTOP CONNECTION login. You can reboot the computer and it
will
| > | then
| > | | > | allow a local login without changing the "allow logon to
terminal
| > | | > | server" setting in AD Users and Computers. Has anyone found a
"fix"
| > | for
| > | | > | this?
| > | | > |
| > | | > | David
| > | | > |
| > | | > |
| > | | > | Check the properties of the AD acct that cannot logon locally
to the
| > | | > | machine. On the Terminal Services Profile tab, enable the
"Allow
| > logon
| > | | > | to terminal server" option. It appears that the computer gets
| > "stuck"
| > | | > | in terminal services mode after a Remote Desktop user logs off.
| > When a
| > | | > | domain user w/o the rights to logon via terminal services
| > subsequently
| > | | > | tries to logon locally, they are denied access.
| > | | > |
|

.

Relevant Pages

  • Re: Looking for info about scavenging Server 2003
    ... Ken Zhao ... Microsoft Online Support ... Microsoft Global Technical Support Center ... When responding to posts, please "Reply to Group" via your newsreader so ...
    (microsoft.public.windows.server.dns)
  • Re: User Migration issue
    ... Ken Zhao ... Microsoft Online Support ... Microsoft Global Technical Support Center ... | the new domain username on the Administrator local group of my pc it ...
    (microsoft.public.windows.server.migration)
  • Re: EventID 5782
    ... Ken Zhao ... Microsoft Online Support ... Microsoft Global Technical Support Center ... |> | WITHOUT affecting the dynamic DNS registrations for netlogon? ...
    (microsoft.public.windows.server.dns)
  • RE: AD DNS Zone name change...
    ... Ken Zhao ... Microsoft Online Support ... Microsoft Global Technical Support Center ...
    (microsoft.public.windows.server.migration)
  • Re: ADMT post script commands
    ... Ken Zhao ... Microsoft Online Support ... Microsoft Global Technical Support Center ... When responding to posts, please "Reply to Group" via your newsreader so ...
    (microsoft.public.windows.server.migration)