Re: you do not have permission to log on locally

From: AMD800 (ptmcmillan@attbi.com)
Date: 04/25/03 

From: "AMD800" <ptmcmillan@attbi.com>
Date: Fri, 25 Apr 2003 09:30:22 GMT

I am having the same problem, I can't logon with the local machine account
for the administrator. I have been using it without a problem, I logged off
and attempted to log back on some hours later and received logon message
"the local policy of this system does not permit you to logon interactively"
I am unable to remove the administrators account from the "deny local log ".
I've unchecked it and rebooted, the efffective policy setting still remains.
How do I override these local policies. No domain policies are set.
"Steven L Umbach" <n9rou@attbi.com> wrote in message
news:4__oa.562519$F1.77547@sccrnsc04...
> Use domain policy to override whatever security settings are causing
> the problem. Create an OU and add a new group policy for it. In that
policy
> configure the user right to "log on locally" to have administrators and
> users group. Configure the deny local log on to include the guests
account.
> Both settings must be defined to override local policy on the machine.
Move
> the machine into the OU. Refresh the policy on the dc - secedit
> /refreshpolicy machine_policy /enforce. Wait a couple of minutes and
reboot
> the problem machine. That should work unless the machine has been removed
> from the domain or it's machine account/password is corrupted. --- Steve
>
> "Jason Gallas" <jgallas@usa.nospam.net> wrote in message
> news:eEO7#aDCDHA.1616@TK2MSFTNGP11.phx.gbl...
> > I have gotten this on a windows 2000 pro computer in my domain. I did
not
> > change any security settings on the machine but nobody can logon
locally.
> > what could have caused this and how do I remedy it?
> >
> > Jason
> >
> >
>
>

Relevant Pages

  • Re: Stop Certain user accounts logging onto pc??
    ... just put that account into the "Deny Logon ... Locally" list and enable that policy. ...
    (microsoft.public.windowsxp.security_admin)
  • Really no answer?
    ... the logon error message I get is "Your account is ... and juicing a few security settings ... Since it isn't limited to merely the 500 builtin account, ... has Traversal Bypass and Local Logon rights, ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Limit number of Logon attempts
    ... I understand that you want to adjust the logon attempts through Group ... we have an Account Lockout policy ...
    (microsoft.public.windows.server.sbs)
  • Re: Cant login with new user account
    ... Are you trying to logon to a DC? ... there's a policy there that denies access to logon interactively ... I've created a new account in Active ... > - Group Policy Creator Owners ...
    (microsoft.public.windows.server.active_directory)
  • Re: Protect user accounts
    ... Enable strong passwords in the password policy, ... this helps to protect in that way if some one take over an account the ... users in OU1 to computers in OU2 and the other way around. ... > failed logon attemps. ...
    (microsoft.public.windows.server.active_directory)