Re: "logon failure: the user has not been granted
From: Karl Levinson [x y] mvp (levinson_k@excite.com)
Date: 10/30/02
- Next message: WRCsam: "AOL Abuses Internet Explorer's Trusted Sites Feature"
- Previous message: Michael A. Covington: "Re: Allow Power Users to change network connections?"
- In reply to: Jack: ""logon failure: the user has not been granted"
- Next in thread: Jack: "Re: "logon failure: the user has not been granted"
- Reply: Jack: "Re: "logon failure: the user has not been granted"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Karl Levinson [x y] mvp" <levinson_k@excite.com> Date: Wed, 30 Oct 2002 16:27:37 -0500
"Jack" <jbatura@anatol.com> wrote in message
news:0e7601c2804e$1dca0b20$37ef2ecf@TKMSFTNGXA13...
>
> A ll network users lost connection to server (windows
> 2000. I created new accounts for all network users but is
> not working. Always when I try access server from network
> that message is showing up "logon failure: the user has
> not been granted the requested logon type at this
> computer."This problem is peculiar b/c these machines were
> connected to other machines, and all worked without any
> problems. I have checked all of the security settings,
> account policies, user account, etc. and have come up with
> nothing.
Check the group policy settings in the Group Policy MMC locally on the
server or domain controller. It sounds like the users are in a group [such
as Everyone] that is missing from an entry that permits either
local/interactive or remote/network access, or has been added to a group
that denies these types of logon. Note that Deny takes precedence over
grant, so a user that has in the Grant Interactive Login list still can't
log in if the Everyone group is in the Deny Interactive Logon list.
This would be under Computer Configuration, Windows Settings, Security
Settings, Local Policies, User Rights Assignment. Note that there is a
column for Local settings and one for Effective settings. If the Effective
setting is wrong while the Local setting is right, Group Policy has been
changed in Windows 2000 Active Directory and must be changed there [look in
the Active Directory Users and Computers MMC on the server and right-click
on the appropriate OU to see the Group Policy for that OU].
- Next message: WRCsam: "AOL Abuses Internet Explorer's Trusted Sites Feature"
- Previous message: Michael A. Covington: "Re: Allow Power Users to change network connections?"
- In reply to: Jack: ""logon failure: the user has not been granted"
- Next in thread: Jack: "Re: "logon failure: the user has not been granted"
- Reply: Jack: "Re: "logon failure: the user has not been granted"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
