Re: new AD member wont allow no-admin logins

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Take a look at the local security policy

Start / Programs / Admin Tools / Local Security Policy
Security Settings / Local Policies / User Rights Assignment Allow Log on
Locally

This can prevent users from logging on. See if the group Users is contained
with in this group

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"sammy" <dit.dash@xxxxxxxxx> wrote in message
news:1165519496.657234.188340@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
We've recently reinstalled WXP-SP2 on a machine and rejoined our
domain. Accounts with
admin priv can login to this machine (domain login, not local login)
but all others get
either
user not allowed to login to this computer
or
Your account is configured to prevent you from using this computer.
Please try another
computer.

I've tried removing the host from the domain and re-joining, disabling
and resetting the
host on the server within AD, removing and re-adding to AD.

Clearly it's an authentication problem but I'm at a loss as to where to
look at this
point. Any ideas?

Thanks



.



Relevant Pages

  • RE: Cant Access MCE PC Remotely
    ... There is a seperate user rights assignment for this function so check it ... Double click on Allow logon through Terminal Services in the right hand plane. ... Administrators and Remote Desktop users should be listed. ... >> in the local security policy and make sure that the relivant services are ...
    (microsoft.public.windows.mediacenter)
  • Local Security Policy settings have locked out Admin. account
    ... I tried to login with my account ... error message that the local security policy settings do ...
    (microsoft.public.win2000.security)
  • Access denied, unable to connect
    ... Check the Local Security Policy on that PC. ... Expand "Local ... Policies" & "User Rights Assignment". ...
    (microsoft.public.win2000.printing)
  • RE: XP User Lockdown
    ... Go to Control Panel - Administrative Tools - Local Security policy - open ... Local Policies then User Rights Assignment and Software Restriction Policy ... There are many things you can restrict the Guest account from doing here. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Strange change to Group Security Policy
    ... Local Security Policy Values Revert to the Values That Are Stored in SecEdit.sdb ... > allow to login interactively" or a message pretty like ... > even if they were on a domain server and their accounts ... > Also I saw an admin user account set in the policy to be ...
    (microsoft.public.win2000.security)