RE: Remote Workplace

Hi Sean,

Thanks for your update.

Let us perform the following tests to isolate the issue.

I. Please ensure the laptop located in LAN network and joined the domain,
then please try to setup RDP connection to the laptop from the SBS server
box with a domain admin account, what is the result? If the process failed,
please let me know the exact error message. Also let us check the following
settings on the laptop:

A. Right-click My Computer and click Properties.
B. On the Remote tab, ensure the option "Allow users to connect remotely to
this computer" is checked.
C. Click Select Remote Users, ensure the user is in the users list.

If the checkbox of "Allow users to connect remotely to this computer" is
NOT checked, please check it and then run command "gpupdate /force" (no
quotation marks) on the computer and then logoff and logon the laptop. Then
please try to setup RDP connection to the computer (mstsc), how about the
result?

Refer to the following Knowledge Base article for more information:

315328 How to Use the Remote Desktop Feature of Windows XP Professional
http://support.microsoft.com/?id=315328

II. Please rerun the CEICW (configure e-mail and internet connection wizard
-> Connect to the internet) to configure the SBS internet settings. Please
ensure publish the Outlook Web Access, RWW site to internet. Open Server
Management console and navigate to 'To Do List'. Click 'Connect to the
Internet' and you will see the wizard. I suggest that you refer to the
following KB article to configure the network connection:

825763 How to configure Internet access in Windows Small Business Server
2003
http://support.microsoft.com/?id=825763

*Note: If you have installed any hardware firewall or router outside the
network, you need manually open related ports (80, 443, 25, 444, 4125) on
the hardware firewall or router.

Then please test the issue to see if the issue be fixed.

III. When you logon the SBS server box to connect to the laptop with
"Susan" account, what is the exact error massage you received? Please try
to connect to the laptop with a fine domain admin user account, how about
the result?

IV. Please get gpresult report on the laptop to analyze the issue by run
command "gpresult > c:\gpresult/txt" and find the gpresult.txt file and
mail to me. My working mailbox as: v-yanniw@xxxxxxxxxxxxx

I appreciate your time and efforts to the issue. We are glad to help-).

For your convenience, l copied the initial post here:
£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½
Hi Sean,

Thanks for using the SBS newsgroup.

I am sorry for the delayed response due to weekend. Please understand that
the newsgroups are staffed weekdays by Microsoft Support professionals to
answer your systems and applications questions. Your understanding is
greatly appreciated!

From your description, I understand the issue to be: one user can not
remotely logon his client computer and receive error message "The local
policy of this system does not permit you to log on interactively". If I am
off base, please don't hesitate to let me know.

The error "The local policy of this system does not permit you to log on
interactively" may occur if the user does not have "logon locally" user
right. I would like to confirm that you have check the "Allow logon
locally" policy and "deny logon locally" policy in the Default Domain
policy.

Please check if the user accounts who can not logon to the server is a
member of either the Remote Operators group or the Domain Power Users
group. On SBS 2003, the "Deny log on locally" policy setting is applied to
the Remote Operators group in the Default Domain Controllers Policy object.
This policy setting also applies to the Domain Power Users group because
the Domain Power Users group is a member of the Remote Operators group.
Since a deny policy always overrides an allow policy, this policy setting
prevents users from logging on to domain controllers in the domain, even if
the "Allow log on locally" policy applies to the same users.

Remove the Domain Users group or those users from the Remote Users group or
the Domain Power Users group. Try to test, how about the result?

Please refer to the following KB article to get detail methods:
"The local policy of this system does not permit you to logon
interactively" error message when you try to log on to a computer that is
running Windows Small Business Server 2003 by using an Administrator account
http://support.microsoft.com/?id=841188

If the issue persists, please help me collect the following information to
isolate the issue:

1. Can you logon the client computer remotely with Domain admin user
account? If not, what is the error message you received?

2. Does the issue happen when the user try to remotely log his computer in
RWW site or when he try to remotely RDP to his computer in other LAN
workstation? If it happens in RWW site, please try to remotely logon to his
computer with the user account through RDP from another workstation in LAN,
what is the result?

Hope above information helps. I am happy to be of assistance to you and
look forward to your reply.

£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½£½

Have a nice weekend!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
The customer mail content:
====================
Hi Jenny,

The laptop has returned to the office. I took a look at it again and am
a bit stumped. I have created 3 users on the local computer all with
administrative rights, however, when logged onto the Server (SBS 2003) I
cannot logon as "Susan" remotely. She is part of the users, remote users,
mobile user, and printers group.

I can't seem to find my original post to make it inactive.

Thanks,

====================

--------------------
X-Tomcat-ID: 103028573
References: <772152CB-BC05-4C2D-B865-7DC7330674E2@xxxxxxxxxxxxx>
<RE0X9$8dGHA.220@xxxxxxxxxxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
From: v-yanniw@xxxxxxxxxxxxxxxxxxxx ("Jenny wu [MSFT]")
Organization: Microsoft
Date: Thu, 18 May 2006 07:10:52 GMT
Subject: RE: Remote Workplace
X-Tomcat-NG: microsoft.public.windows.server.sbs
Message-ID: <mEQ$0okeGHA.5432@xxxxxxxxxxxxxxxxxxxxx>
Newsgroups: microsoft.public.windows.server.sbs
Lines: 212
Path: TK2MSFTNGXA01.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:268885
NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182

Hi Sean,

Thanks for your update by mail. I am glad to work with you again-)!

Ok, it is fine. I will wait for you. Please don't hesitate to let me know
if you have any further question on the issue. I am glad to be assistance
to you.

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check
the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In
doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
The customer mail content:
======================
Jenny,

Nice to hear from you again, (it has been about a year), the computer I
was referring to has been out of town (laptop) and is returning today. I
will get back to you in a few days.

Thanks for your attention!

======================

--------------------
X-Tomcat-ID: 40392538
References: <772152CB-BC05-4C2D-B865-7DC7330674E2@xxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
From: v-yanniw@xxxxxxxxxxxxxxxxxxxx ("Jenny wu [MSFT]")
Organization: Microsoft
Date: Mon, 15 May 2006 03:31:00 GMT
Subject: RE: Remote Workplace
X-Tomcat-NG: microsoft.public.windows.server.sbs
Message-ID: <RE0X9$8dGHA.220@xxxxxxxxxxxxxxxxxxxxx>
Newsgroups: microsoft.public.windows.server.sbs
Lines: 141
Path: TK2MSFTNGXA01.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:268016
NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182

Hi Sean,

Thanks for using the SBS newsgroup.

I am sorry for the delayed response due to weekend. Please understand
that
the newsgroups are staffed weekdays by Microsoft Support professionals to
answer your systems and applications questions. Your understanding is
greatly appreciated!

From your description, I understand the issue to be: one user can not
remotely logon his client computer and receive error message "The local
policy of this system does not permit you to log on interactively". If I
am
off base, please don't hesitate to let me know.

The error "The local policy of this system does not permit you to log on
interactively" may occur if the user does not have "logon locally" user
right. I would like to confirm that you have check the "Allow logon
locally" policy and "deny logon locally" policy in the Default Domain
policy.

Please check if the user accounts who can not logon to the server is a
member of either the Remote Operators group or the Domain Power Users
group. On SBS 2003, the "Deny log on locally" policy setting is applied
to
the Remote Operators group in the Default Domain Controllers Policy
object.
This policy setting also applies to the Domain Power Users group because
the Domain Power Users group is a member of the Remote Operators group.
Since a deny policy always overrides an allow policy, this policy setting
prevents users from logging on to domain controllers in the domain, even
if
the "Allow log on locally" policy applies to the same users.

Remove the Domain Users group or those users from the Remote Users group
or
the Domain Power Users group. Try to test, how about the result?

Please refer to the following KB article to get detail methods:
"The local policy of this system does not permit you to logon
interactively" error message when you try to log on to a computer that is
running Windows Small Business Server 2003 by using an Administrator
account
http://support.microsoft.com/?id=841188

If the issue persists, please help me collect the following information
to
isolate the issue:

1. Can you logon the client computer remotely with Domain admin user
account? If not, what is the error message you received?

2. Does the issue happen when the user try to remotely log his computer
in
RWW site or when he try to remotely RDP to his computer in other LAN
workstation? If it happens in RWW site, please try to remotely logon to
his
computer with the user account through RDP from another workstation in
LAN,
what is the result?

Hope above information helps. I am happy to be of assistance to you and
look forward to your reply.

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the
corresponding
newsgroups so that they can be resolved in an efficient and timely
manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check
the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In
doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.

--------------------
Thread-Topic: Remote Workplace
thread-index: AcZ16ddBVhigmAGTStmJWO9EP9lFSw==
X-WBNR-Posting-Host: 68.56.166.158
From: =?Utf-8?B?U2Vhbg==?= <Sean8621@xxxxxxxxx>
Subject: Remote Workplace
Date: Fri, 12 May 2006 10:31:02 -0700
Lines: 11
Message-ID: <772152CB-BC05-4C2D-B865-7DC7330674E2@xxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain;
charset="Utf-8"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
Newsgroups: microsoft.public.windows.server.sbs
Path: TK2MSFTNGXA01.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:267701
NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
X-Tomcat-NG: microsoft.public.windows.server.sbs

Hi, I built a Windows 2003 premium edition SBServer for a client
configured
the workstations and everything is fine, however, I recently added a new
client and everything is working properly except I cannont log her on to
her
client remotely. I have been over everyone's security settings and her's
match a basic user account. What am I missing???? This is the message I
receive "Local policy of this system does not permit you to log on
interactively" she is an admin on the local computer.


--
Thanks for you assistance!






.

Relevant Pages

  • Re: Limited Access
    ... For users that you want to logon to a computer via Remote Desktop you need ... Remote Desktop Users group. ... sharing to the computer not impeded by a firewall and the user account also ... On my desktop and wired laptop the hard drives are ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Server 2K3 Remote Desktop Access - is this right place?
    ... All roads for that particular error of 'You do not have access to logon to ... On Windows Server 2003, launch GPEDIT.MSC from Start -> Run. ... Drill down and expand the following for Local Computer Policy: ... > Strange - when I activate the Remote Desktop Terminal from the server, ...
    (microsoft.public.win2000.advanced_server)
  • RE: HELP!!!!
    ... I understand that users can not logon to the SBS ... server computer side) or when users logon the server using Remote Desktop ... The error "The local policy of this system does not permit you to log on ...
    (microsoft.public.windows.server.sbs)
  • RE: how long will a cached account work?
    ... >If a user has a laptop which is on the domain and then they go on a trip. ... The ability to used cached credentials to log on is set via a Group Policy ... the local machine settings. ... Options\ Interactive Logon: Number of previous logons to cache (in case ...
    (microsoft.public.windows.server.sbs)
  • password policy not working
    ... on our Win 2003 Server. ... The laptop and user is part of the ... I have assigned a group policy to test and am ... server to force pw change at next logon, ...
    (microsoft.public.windows.server.active_directory)