RE: Unable to logon interactively.

Hi Dave,

Thank you for posting in SBS newsgroup.

>From your description, I understand that you cannot logon to the new
machine by using a user account but you can still user the domain
administrator user account to logon. If I misunderstand your concern,
please let me know.

As I know, this behavior occurs when a domain policy, at the site, domain,
or organizational unit, has a configuration that denies the users the Log
on Locally user right.

You may check the default domain policy to confirm that the Log on Locally
user right is not defined or is defined to include everyone who is able to
log on to domain member computers. To check the default domain policy,
follow these steps:

1. Start the Active Directory Users and Computers snap-in.

2. Right-click the domain and click Properties.

3. Click Group Policy.

4. Double-click Default Domain Policy.

5. Click Computer Configuration, click Windows Settings, and then click
Security Settings.

6. Click Local Policies, click User Rights Assignments, and then click Log
on Locally. NOTE: Only the users that are in the list for this user right
should have the right to log on locally to domain member computers.

7. Add Domain Users or Everyone or undefine the policy (which is the
default setting).

For detailed information, please refer to the following KB article:

273720 Error Message: The Local Policy of This System Does Not Allow You to
Log
http://support.microsoft.com/?id=273720

Hope the information help.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Subject: Unable to logon interactively.
| From: David Patnaude <dmp-junkNOSPAM@xxxxxxxxxxx>
| Message-ID: <Xns9652A33677990dmpjunk@xxxxxxxxxxxxx>
| User-Agent: Xnews/5.04.25
| Newsgroups: microsoft.public.windows.server.sbs
| Date: Tue, 10 May 2005 13:02:40 -0700
| |
| In a SBS 2003 environment three new Windows XP Pro machines have been
| purchased for the network. No changes were made to user accounts on the
| system.
|
| After connecting the new machine to the network and joining the domain
| using the administrator account, the user of the new machine can not
logon
| to the network with the error that the user is not alloed to logon
| interactively.
|
| The user has had no issues for the past two years logging on and no
changes
| were made other than trying to logon to the new computer.
|
| The administrator account can logon to the new computer still.
|
| Any idea why the user is now getting this error message?
|
| Thanks,
| Dave
|

.

Relevant Pages

  • Re: Login restriction
    ... And what options should I choose in GPO to be able to do what I want? ... logon on 12 different computers. ... these computers, access must be denied. ... then you can use the user account properties ...
    (microsoft.public.windows.server.active_directory)
  • Re: Login restriction
    ... Jorge Silva ... logon on 12 different computers. ... these computers, access must be denied. ... then you can use the user account properties ...
    (microsoft.public.windows.server.active_directory)
  • Re: domain user cant logon. help
    ... > configured in the user account in Active Directory Users and Computers under ... > account/log on to next to the logon hours tab or use net user username on the domain ... what about this PC's config. ...
    (microsoft.public.win2000.security)
  • Re: Deny Logon Locally
    ... Don't give them local ID's on the computers and then they can only logon to ... > domain policy or group policy? ... > logging on through the domain. ...
    (microsoft.public.win2000.security)
  • Re: Concurrent Logons
    ... their user account in Active Directory Users and Computers and you can use ... the user rights for logon locally and deny logon locally to control what ...
    (microsoft.public.windows.server.general)