RE: Unable to logon interactively.




Hi Dave,

Thanks for your reply.

By default, all domain users must have the Logon Locally permission in this
domain policy. I do not know what happened but it seemed that this policy
was modified by some one. SBS will not automatically modify this setting.

In addition, please open the Local Group Policy editor on the problematic
client by running the command "gpedit.msc" to see if only the Admins were
allowed to login locally. By default, it should allow all users to logon.

Hope the information help.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Subject: RE: Unable to logon interactively.
| From: David Patnaude <dmp-junkNOSPAM@xxxxxxxxxxx>
| References: <Xns9652A33677990dmpjunk@xxxxxxxxxxxxx>
<60NhHagVFHA.3052@xxxxxxxxxxxxxxxxxxxxx>
| Message-ID: <Xns96536327DEDB9dmpjunk@xxxxxxxxxxxxx>
| User-Agent: Xnews/5.04.25
| Newsgroups: microsoft.public.windows.server.sbs
| Date: Wed, 11 May 2005 06:44:50 -0700
| |
| v-crinal@xxxxxxxxxxxxxxxxxxxx (Crina Li (MSFT)) wrote in
| news:60NhHagVFHA.3052@xxxxxxxxxxxxxxxxxxxxx:
|
| > 273720 Error Message: The Local Policy of This System Does Not Allow
| > You to Log
| > http://support.microsoft.com/?id=273720
| >
| > Hope the information help.
| >
| > Best regards,
| >
| > Crina Li (MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
|
| Thanks for the response. Only the Admins were allowed to login locally
| under the current policy. Adding the Domain Users solved the problem.
|
| My question though is still why did this work with this configuration for
| the past two years, but the newly added computers would not work for the
| same users?
|
| Thanks again,
| Dave
|

.



Relevant Pages

  • RE: login to multiple computers
    ... the problems occur when domain users logon to a computer ... re-register the security client side extension: ... Explorer Maintenance Policy Processing" policy under Computer ...
    (microsoft.public.windows.server.sbs)
  • RE: Local Policy Does not permit logon interactively ~ Urgent help nee
    ... all domain users should be able to logon to any PC ... on the network by default except for Domain Controllers, ... 2- Create a Domain-wide policy and explicitly allow domain users to logon ...
    (microsoft.public.windows.server.active_directory)
  • RE: Local Policy Does not permit logon interactively ~ Urgent help
    ... controller policy to all OU's except for the DC's. ... all domain users should be able to logon to any PC ... block the Domain Controller OU from inheriting this policy. ...
    (microsoft.public.windows.server.active_directory)
  • RE: Cant set Local Security policies. They fail to save
    ... predefined Security Template on SBS 2003 to restore security groups ... run "gpupdate.exe /force" under command prompt to force the policy ... reboot the Server to test. ... and then logon to client computer to test if user can save system logs. ...
    (microsoft.public.windows.server.sbs)
  • RE: Event ID 537 and Kerberos
    ... a logon type of 3 translates to Network. ... Click Services tab and select Hide All Microsoft Services and Disable ... Step 4: Configure account lockout policy. ... and then click Account Lockout Policy. ...
    (microsoft.public.windows.server.sbs)