Re: The local policy of this system does not permit you to log on interactively

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Miha Pihler (miha-news_at_atlantis.si)
Date: 07/18/04 

Date: Sun, 18 Jul 2004 18:53:20 +0200

Hi Oscar,

open Default Domain Controllers Policy for Editing and expand Computer
Configuration > Windows Settings > Security Settings > User Rights
Assignment > here look for policy "Allow Logon Locally" and double click on
it. Click Add and look for your username and add it. When you are done close
all windows by click e.g. OK...

This policy is to protect your domain controllers from any ordinary domain
user logging on to domain controller. Like you noticed it is only set once
server is promoted to DC.

I hope this helps,

Mike

"Oscar" <oku@xs4all.nl> wrote in message
news:eBHjhTObEHA.2408@tk2msftngp13.phx.gbl...
> I've right set up the Active Directory of Windows Server 2003. Without
> configuring anything at the moment I've tried to connect to Windows
Terminal
> Server. While this has worked all the time before the AD was configured,
> right at the log in, the DNS now reports : 'The local policy of this
system
> does not permit you to log on interactively'. How can I configure this for
a
> user to enable interactively log in ?
>
> Oscar
>
>

Relevant Pages

  • domain users cant logon locally
    ... This is probably caused by the fact that your Windows 2000 ... To find this setting right click the DOmain Controllers OU ... Policy tab, verify that the Default Domain Controllers ... >I have recently installed a new windows 2000 server. ...
    (microsoft.public.win2000.security)
  • Re: Group Policy Loopback Mode not working.
    ... I misread your post in that the loopback user configuration is applying to ... different domain controllers and the GPO's have not replicated for some ... > bizare is that when I log into the machine that I have the policy problem ... > GPM Console is great as I have used it, but the RSOP tool will not work ...
    (microsoft.public.security)
  • Re: Classic Start Menu
    ... said that setting it to 'disabled' through GPO editor will ... Configuration ONLY in 'Computer Configuration' within the Group Policy ... We are no longer using Windows 98... ...
    (microsoft.public.windowsxp.general)
  • Re: SNTP Setup on Windows 2003
    ... RSOP.MSC did work and no policy set for windows time. ... Local Computer Policy | Computer Configuration | Administrative ... ff16fb662b8588cbdf84e712be38@xxxxxxxxxxxxxxxxxxxx, "Meinolf Weber ...
    (microsoft.public.windows.server.setup)
  • Re: Windows 2000 Auditing Object Access
    ... This is known problem if you use Windows XP SP2 to edit GP and then view the ... policy on a Win2000 DC. ... Windows Server 2003/2000/NT; CCA ... > One of the domain controllers is our File and Print server. ...
    (microsoft.public.windows.server.general)