Re: The Local Policy of the system does not permit you to Log on Inter

You've got a membership of a group doing a deny...

Review the memberships of the users.  What's in there?

Ronnie wrote:

Help appreciated. I have a 2003 SBS, with XP (SP2) clients on the LAN. When trying to log onto a PC with a Domain User account, I get the error message “The Local Policy of the system does not permit you to Log on Interactively.” I created another Domain User account and tried to log onto the same pc and I get the same message. I can log onto the pc with a domain administrators account. If I moved to another pc on the Lan, the same thing occurred. When I am connecting to the pc’s, I am doing this remotely via remote access. I am not under the impression that this is happening to all pc’s on the Lan, but just these 2.

To troubleshoot I have checked all GPO’s on the server, and there is no GPO computer settings, where “deny Logon Locally” is set. I have checked the default policy GPO and it is not defined in there. To make absolutely sure I have disabled nearly all GPO’s and still I get the same message.

I have logged onto 1 of these pc’s with a Domain Admin account and in Local Policy, I have ensured the deny Logon Locally” is not set, but still no joy. The domain user’s account is showing as an account that is defined in the Log on locally Policy settings. Even when I grant an individual the right to logon locally I get no joy.

If I try to log on as the Local Administer, I get the message”The Local Policy of the system does not permit you to Log on Interactively”.

I have tested one of the accounts to ensure that remote access is functioning. I did this by logging onto a pc as administrator, and logging on remotely as the user from a browser, and this worked fine. It looks like it maybe individual pc problems, but I am posting this question to see if anyone has had a similar problem, or any tips/advice.

I have not tried this without a remote connection as I am troubleshooting remotely. The heart of this problem seem to be that only Domain Admin can log onto the pc’s, and no other accounts can.

Ronnie

.

Relevant Pages

  • The Local Policy of the system does not permit you to Log on Inter
    ... trying to log onto a PC with a Domain User account, ... When I am connecting to the pc’s, I am doing this remotely via remote access. ... default policy GPO and it is not defined in there. ...
    (microsoft.public.windows.server.sbs)
  • Re: User Restictions on a Standalone Machine
    ... local policy has effect on all machine ... What I would like to do is have an administrator account, ... the system folders or control panel, or be able to change any settings ... make the necessary changes to a particular user/group. ...
    (microsoft.public.win2000.security)
  • Re: Preventing logon to local accounts
    ... account in place. ... RDC to work from home. ... for the domain I get this error message "The local policy of this system ...
    (microsoft.public.windows.server.active_directory)
  • Re: Logon as a batch job
    ... Don't set this setting in the local policy. ... > In looking through the docs it appears the account I'm ... > Where am I supposed to change this user access right if I ... > have done to fix that scheduled task problem? ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Win2K Professional Lockdown w/o Domain
    ... You can use poledit in W2k for standalone config. ... a domain local policy affects all account equally. ...
    (microsoft.public.win2000.security)