Re: The local policy of this system does not permit you to logon interactively

Hi Robert,
using the first article "How to reset security settings back to
default" seems to have fixed the problem.

Thanks.

Robert Li [MSFT] wrote:
Hi,

Thanks for posting in our newsgroup.

From your description, I know that when you tried to log on another PC via
Remote Desktop Connection, you get message: "The local policy of this
system does not permit you to logon interactively". If I am off-base,
please don't hesitate to let me know.

Please let me know the following to make the situation more clearly:

1. When you RDPed to the remote PC, which kind of account do you use domain
administrator, domain user, local administrator, local user, or other type ?

I made a test on my test machine as you said in the post. First I logon as
a local administrator, then as a Domain Administrator, I noticed the "Add
User or Group" and "Remove" is not gray out.

I did the following:

1. Open Local Security Policies snap-in under administrative tools.

2. Go to:

Computer Configuration -> Windows Settings -> Security Settings -> Local
Policies ---> User Rights Assignment

3. In the right-pane, double-click on "Allow Logon through Terminal
Services".

4. Click "Add User or Group" and successful added the user.

Please try to take the following steps to narrow down this problem:

1. Please logon the client with another local administrator account, will
the same problem occur?

2. Please logon as a domain administrator, will the same issue occur?

3. Please reset security setting to default and then check again.

1) Click Start, click Run, type cmd, and then press ENTER.

2) Type secedit /configure /cfg %windir%\repair\secsetup.inf /db
secsetup.sdb /verbose, and then press ENTER. You receive a "Task is
completed" message, and a warning message that something could not be done.
You can safely ignore this message.

For more information, please refer to:

How to reset security settings back to the defaults
http://support.microsoft.com/kb/313222

Remote desktop connection "The local policy of this system does not permit
you to logon interactively"
http://support.microsoft.com/?id=289289

Error Message: Unable to Log You on Because of an Account Restriction:
http://support.microsoft.com/?id=303846

I am looking forward to hear from you.

If you need further assistance, please don't hesitate to let me know.

Best regards,

Robert Li(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================

This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
<From: ashkaan57@xxxxxxxxxxx
<Newsgroups: microsoft.public.windows.server.sbs
<Subject: The local policy of this system does not permit you to logon
interactively
<Date: 11 Apr 2007 10:02:02 -0700
<Organization: http://groups.google.com
<Lines: 21
<Message-ID: <1176310922.277178.116050@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
<NNTP-Posting-Host: 71.178.176.10
<Mime-Version: 1.0
<Content-Type: text/plain; charset="iso-8859-1"
<X-Trace: posting.google.com 1176310923 28279 127.0.0.1 (11 Apr 2007
17:02:03 GMT)
<X-Complaints-To: groups-abuse@xxxxxxxxxx
<NNTP-Posting-Date: Wed, 11 Apr 2007 17:02:03 +0000 (UTC)
<User-Agent: G2/1.0
<X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3,gzip(gfe),gzip(gfe)
<Complaints-To: groups-abuse@xxxxxxxxxx
<Injection-Info: d57g2000hsg.googlegroups.com; posting-host=71.178.176.10;
< posting-account=3hAtLwwAAADWjTWuDkRFaldPioBNaYQs
<Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!TK2MSFTFE
EDS01.phx.gbl!msrtrans!msrn-in!newshub.sdsu.edu!postnews.google.com!d57g2000
hsg.googlegroups.com!not-for-mail
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:29251
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<
<Hi,
<I am unable to logon to a PC at work through Remote Desktop
<Connection. Ii displays the logon screen and when I enter my password,
<it says "The local policy of this system does not permit you to logon
<interactively".
<
<- I am a member of Remote Desktop Users (on top of other groups)
<- I ran secpol.msc and made sure that "Allow logon through terminal
<services" includes Remote Desktop Users. Also made sure that "Deny
<logon ..." did not include Remote Desktop users. However, "Add User or
<Group" and "Remove" buttons are grayed out, so I cannot add my user ID
<explicitly.
<- When I right click on My Computer / Properties / Remote, the
<checkboxes for Remote Desktop and Remote Assistance are checked. When
<I click "Select Remote Users", my user id is listed under the textbox.
<_ I am part of local administrators group.
<
<What else do I need to do to get remote desktop working!?
<
<Thanks.
<
<

.