The Local Policy of the system does not permit you to Log on Inter

Help appreciated. I have a 2003 SBS, with XP (SP2) clients on the LAN. When
trying to log onto a PC with a Domain User account, I get the error message
“The Local Policy of the system does not permit you to Log on Interactively.”
I created another Domain User account and tried to log onto the same pc and
I get the same message. I can log onto the pc with a domain administrators
account. If I moved to another pc on the Lan, the same thing occurred.
When I am connecting to the pc’s, I am doing this remotely via remote access.
I am not under the impression that this is happening to all pc’s on the Lan,
but just these 2.

To troubleshoot I have checked all GPO’s on the server, and there is no GPO
computer settings, where “deny Logon Locally” is set. I have checked the
default policy GPO and it is not defined in there. To make absolutely sure I
have disabled nearly all GPO’s and still I get the same message.

I have logged onto 1 of these pc’s with a Domain Admin account and in Local
Policy, I have ensured the deny Logon Locally” is not set, but still no joy.
The domain user’s account is showing as an account that is defined in the Log
on locally Policy settings. Even when I grant an individual the right to
logon locally I get no joy.

If I try to log on as the Local Administer, I get the message”The Local
Policy of the system does not permit you to Log on Interactively”.

I have tested one of the accounts to ensure that remote access is
functioning. I did this by logging onto a pc as administrator, and logging
on remotely as the user from a browser, and this worked fine. It looks like
it maybe individual pc problems, but I am posting this question to see if
anyone has had a similar problem, or any tips/advice.

I have not tried this without a remote connection as I am troubleshooting
remotely. The heart of this problem seem to be that only Domain Admin can
log onto the pc’s, and no other accounts can.

Ronnie

.

Relevant Pages

  • Re: Local Group Policy mistake.
    ... I am unsure of the local admin account status connecting ... But back to connecting, it won't ping the machine..this seems to be a result ... I am assuming that you have remote admin rights over the machine? ... refresh policy, those SRP settings will be removed. ...
    (microsoft.public.windows.group_policy)
  • Re: Terminal Server logon problem
    ... I am getting a group policy error - You do not have permissions to ... The only thing I thought I changed was taking the administrators account ... Make the user a member of the Remote Desktop Users group. ... Terminal Services", make sure that account is in there. ...
    (microsoft.public.windows.server.general)
  • Re: How to remote access Windows XP Pro computer?
    ... you happen to use Norton Internet Security please read the following link. ... link for the remote person to access their system. ... "Is LogMeIn secure and what is SSL? ... separate passwords to access both your LogMeIn account and your Target ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: RWW and Remote desktop stopped working on all clients
    ... After diggin through ALL the group policies, I found Remote ... Desktop DISABLED under the Account Lockout policy - I don't think I've even ... adminsitrator or another account with Domain Admin role; also the server ...
    (microsoft.public.windows.server.sbs)
  • Re: DomainLocalServer$ is not a valid user
    ... I have traced by SQL-profiler on remote computer. ... it's always traced the user account. ... Its Security is ... to use the current user credential to logon to the remote server. ...
    (microsoft.public.sqlserver.security)