RE: Setting up Users

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Dear Customer,

Thank you for posting to the SBS Newsgroup.

I understand that you created some user accounts in ADUC, but when they log
in domain, they encounter following error message:

"The Local Policy of this system does not permit you to logon interactively"

If I have misunderstood your issue, please let me know.

==========

Before we start to troubleshoot the issue, I need to make sure you have
correctly setup those user accounts in ADUC. Please see:

a. Go to Server Management\Advanced Management\Active Directory Users and
Computers\Yourdomain.local\MyBusiness\Users\SBSUsers.
b. Right click in the right panel, click New and select User to create User
account.
c. Make sure that you do not check the box Create an Exchange Mailbox.
d. Finish the wizard.

==========

If you have correctly set up these user accounts, please help me to gather
following information for accurate research:

1. When did the issue occur? After you created these user accounts in ADUC,
did these users experience this issue before? If no, did you make any
changes recently?

2. Where did these problematic users meet the error message?

a. On the SBS Server?

OR

b. On their client workstations? If it is on the client workstation, what
is the operating system? Windows XP SP2 or Windows 2K Professional?

OR

c. Remote Desktop to any computer?


I suggest that you fully describe the steps so we can reproduce your issue
on my test machine.

3. On the problematic computer, run "eventvwr" (without quotation marks),
check whether there are any errors. If yes, double click it, click the Copy
button and paste the full content to the Newsgroup.

4. Does this issue occur to all users you created in ADUC or only certain
of them?

5. If you ask one of the problematic user to log in a good computer, will
this issue occur?
==========

For your suggestions:

1. On the problematic computer, click Start->Run, type "gpedit.msc"
(without the quotes) and click OK.

2. Go to Computer Configuration\Windows Settings\Security Settings\Local
Policies\User Rights Assignment.

3. Double click the "Access this computer from the network" policy and make
sure the following groups are listed:

Administrators
Everyone
Power Users
Users

4. Double click the "Allow logon through Terminal Services" policy and make
sure the following groups are listed:

Administrators
Remote Desktop Users

5. Check the "Deny access to this computer from the network" policy and
make sure the groups mentioned above are NOT listed.

6. Check the "Deny logon locally" policy and make sure the groups mentioned
above are NOT listed.

7. Check the "Deny logon through Terminal Services" policy and make sure
the groups mentioned above are NOT listed.

8. Check the "Log on locally" policy and make sure the following groups are
listed:

Administrators
Guest
Power Users
Users

9. Close the "Gourp Policy" window.

10. Click Start->Run, type "gpupdate /force" (without the quotes) and click
OK.

886620 "The local policy does not permit you to logon interactively" error

http://support.microsoft.com/?id=886620

247989 Domain Controllers Require the "Log on Locally" Group Policy Object
for
http://support.microsoft.com/?id=247989

Please take your time to perform the steps. If you have any updates, please
feel free to let me know. I am looking forward to hearing from you!

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
Thread-Topic: Setting up Users
thread-index: AcZHl+H8GtcOyO+YRIuImGVsvGRbSQ==
X-WBNR-Posting-Host: 195.26.50.53
From: =?Utf-8?B?dG9mZmVlbWFu?= <'no-spam' posting alias>
Subject: Setting up Users
Date: Tue, 14 Mar 2006 10:48:28 -0800
Lines: 9
Message-ID: <09A2CC5F-8721-4015-95A3-7610B1E2574C@xxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain;
charset="Utf-8"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
Newsgroups: microsoft.public.windows.server.sbs
Path: TK2MSFTNGXA03.phx.gbl
Xref: TK2MSFTNGXA03.phx.gbl microsoft.public.windows.server.sbs:252647
NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
X-Tomcat-NG: microsoft.public.windows.server.sbs

Can anybody point me in the right direction.

I need to set-up some users in the normal AD user group and not the My
business user group (no need for them to have e-mail or acess to SBS )
Error
message i get when logging is

The Local Policy of this system does not permit you to logon interactively

Any help would be much welcome


.

Quantcast