Re: Users Can't Log Into Local Machine That Is Attached To A Domain



Hi

Normal users aren't allowed to logon in a DC via T.S, you need to give
permissions to allow logon locally on the DC (Windows 2000 Server). If
you're using Windows 2003 you have the option to allow a user to logon
trough terminal services.

You can find these settings on:
Computer Configuration -> Windows Settings -> User Rights Assignment ->


--
I hope that the information above helps you

Good Luck
Jorge Silva
MCSA
Systems Administrator

"Dominick D." <DominickD@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:5A67164A-563F-4531-A7E1-33A6B9C528F2@xxxxxxxxxxxxxxxx
Hello, Gurus,

I have a DC and a local XP machine on the same subnet; I created a user
account and when I try to log this user on the attached local machine, I
get
this message that says local security policy does not permit user to
interactively log in. I made this user a remote desktop user, set the
default
domain policies of allowing users to log in thru terminal services, put
the
user into the print operators group, who has, by default, the right to log
into the DC, but I still get that message. Can someone out there help me?
Thank you.


.



Relevant Pages

  • Re: How to force a logoff in a logon script?
    ... Windows has a registry key that governs which UI will be presented ... the unauthorized user cancels the logon dialog and goes away ... system, but complains that there was no cancel button, only an OK ...
    (microsoft.public.windows.server.scripting)
  • Re: When utilizing "Switch User" the music "NEVER" Stops!
    ... 2004 Windows MVP "Winny" Award ... Switch User, changing logons and checking the top of Zone ... >logging onto the 2nd logon and then logging off and back ... >>NEVER stopped thru any of the screens ?? ...
    (microsoft.public.windowsxp.general)
  • Re: Restrict a user from a remote desktop connection
    ... Policies\ User Rights Assignment\ Allow logon through Terminal Services ... This is a windows 2003 domain. ... Can I uncheck the following in their user account - "allow user to logon to terminal server", ... Eric Sabo ...
    (microsoft.public.windows.server.active_directory)
  • Re: Huh? "Login failure: the user has not been granted the requested logon type at this compute
    ... I'm a pretty experienced Windows user and programmer, ... the user has not been granted the requested logon type ... on the appropriate OU to see the Group Policy for that OU]. ... > administrators' group to the domain controller. ...
    (microsoft.public.security)
  • Re: Server 2K3 Remote Desktop Access - is this right place?
    ... All roads for that particular error of 'You do not have access to logon to ... On Windows Server 2003, launch GPEDIT.MSC from Start -> Run. ... Drill down and expand the following for Local Computer Policy: ... > Strange - when I activate the Remote Desktop Terminal from the server, ...
    (microsoft.public.win2000.advanced_server)

Loading