Re: Interactive Logon Prohibited on DC

Tech-Archive recommends: Fix windows errors by optimizing your registry

What security policy did you change? what errors are in the event log? Is
there a TS license server up and running?

Jeff Pitsch
http://www.sbcgatekeeper.com
Your Terminal Services Security Website

"Marlon Velasco" <mvelasco@xxxxxxxxxxxxxx> wrote in message
news:OVRQw9c1FHA.3756@xxxxxxxxxxxxxxxxxxxxxxx
> Single Domain Environment:
> 1 - Windows 2000 SP4 AD/Terminal Server (1st DC)
> 1 - Windows 2000 SP4 AD/File Server (2nd DC)
>
> I just setup TS on the 1st DC (I know this is not recommended) but
> everytime TS users try to connect they get an error saying "The local
> policy does not permit interactive logons....". I changed the Domain
> Controller Security policy to include all the Terminal Server users and
> ran the secedit command as specified in the MS article regarding this
> error - same error. I even rebooted the server with the same results.
> Interestingly enough I am able to connect to the 2nd DC with any of the
> user accounts, although this is setup just as Terminal Services in Remote
> Admin mode. This tells me the domain controller policy should be working
> OK so it's got to be a setting on the 1st DC. Any ideas? I got around
> this temporarily by adding the TS users to the Server Operators group
> (also setup to open specific application to avoid access to desktop).
>
> Any ideas would be greatly appreciated.
>
> Thanks,
> Marlon
>


.

Relevant Pages

  • Domain Controller Security Policy errors
    ... Security Policy or the Domain Controller Security Policy. ... The DC is also a print and file server. ... The domain controller for Group Policy operations is not available. ...
    (microsoft.public.win2000.active_directory)
  • Re: issue accessing an AD server
    ... You can reset local security settings to default defined levels as described ... However on a domain controller, ... Security Policy will override user rights assignments. ... > restore the server from tape. ...
    (microsoft.public.win2000.security)
  • Re: Application.StartupPath
    ... bellow steps to change your app's security policy settings. ... company's Network admin set up a login script to run the installer - I ... However when I just copy the exe file to the file server (along with the ... This xml file is located in the same folder as the executable. ...
    (microsoft.public.dotnet.languages.vb)
  • Re: Cant change security policy
    ... > I'll try to get the secure passwords accepted by the client, ... > logon to the server from the network. ... > There was a problem when I tried installing the AD and Exchange with the ... >> improved security policy that will go into effect 7 days after the system is ...
    (microsoft.public.windows.server.sbs)
  • Re: How to configure for Two different IP subnets
    ... Active Directory will go haywire in a setup like that. ... AD integrates with the local DNS, so you cannot use the DNS at your ISP ... With Server 2003 Standard ... for its internal interface (ie the VPN endpoint). ...
    (microsoft.public.windows.server.networking)