Re: The Local Policy of This System Does Not Permit You to Logon Interactively

From: Jim (jimATdmatter.com)
Date: 10/07/03 

Date: Mon, 6 Oct 2003 17:38:04 -0600

Ok, thanks I will give that a try and let you know.

As to the Local security policy, all my other workstations that are working
ok, have all the local groups under 'Log on locally'. On the one that
started working after setting up the OU on the server, it is the same as the
others that are working properly. I guess setting up the OU resets the
permissions to what they should be.

Someone told me today that they have heard of this happening to workstations
that were upgraded to Windows 2000 from Windows 98. Not sure if that's the
case here but, on the one workstation I did a format and fresh install of
Win2K, and it popped up again after installing MS project which forces a
restart. I think that may have been a coincidence.

Thanks,

jim.....

Steven L Umbach" <n9rou@comcast.net> wrote in message
news:Emmgb.231655$mp.143106@rwcrnsc51.ops.asp.att.net...
> Hi Jim. I have not heard of that. When you put the problem workstation in
> the OU and were allowed to logon, did you check the Local Security Policy
> for that machine in user rights assignments to see what was preventing the
> logon?? I know a while back that there was virus/worm going around that
> would run a secedit command on a computer to change the local policy
> settings to deny the logon. Usually a user would notice a brief message on
> the screen as it was executed. In regards to the KB link, try this. Also
> configure the policy of the OU to contain just the guest account in deny
> logon locally user right assignment. That way if the problem crops up
again
> and somehow your computers have a deny logon locally configured for the
> users group, etc in Local Security Policy it will be overriden by the OU
> policy to contain only the guest account. Good luck. --- Steve
>
> "Jim" <jimATdmatter.com> wrote in message
> news:eXJOukBjDHA.4048@TK2MSFTNGP11.phx.gbl...
> > We have been having a problem on our small Windows 2000 Server Domain.
We
> > have about 15 workstations all running win2kpro. So far 3 systems have
> come
> > up with the error 'The Local Policy of This System Does Not Permit You
to
> > Logon Interactively' when the user tries to logon. This after the
systems
> > were working ok for over a year. It appears to start happening on some
> > workstations after installing Service Pack 4.
> >
> > I ran the fix suggested by Microsoft in article 'Knowledge Base
Article -
> > 285793'
> >
>
http://support.microsoft.com/default.aspx?scid=kb;en-us;285793&Product=win2000
> > which involves creating a new Organizational Unit. This worked for one
of
> > the workstations and not the other 2, so I reformatted and reinstalled
W2K
> > from scratch, since then one of the units has started coming up with
this
> > error again.
> >
> > When this message comes up during logon, it seems impossible to logon to
> the
> > system, either using the domain or logging on to the local computer with
> or
> > without Administrator access. This is frustrating. Any idea what's
causing
> > this, and any other solutions, short of not using Service Pack 4?
> >
> > Thanks,
> >
> > Jim.....
> >
> >
>
>

Relevant Pages

  • Re: Login & logout of the OS
    ... XP Pro records logon and logoff times in the Security branch of Event ... Open Local Security Policy. ... Click on the + sign next to Local Policies in the left hand pane. ...
    (microsoft.public.windowsxp.general)
  • Re: Login & logout of the OS
    ... XP Pro records logon and logoff times in the Security branch of Event ... To enable auditing go to Control Panel and open Administrative Tools. ... Open Local Security Policy. ... Click on the + sign next to Local Policies in the left hand pane. ...
    (microsoft.public.windowsxp.general)
  • Re: Login & logout of the OS
    ... XP Pro records logon and logoff times in the Security branch of Event ... Open Local Security Policy. ... Click on the + sign next to Local Policies in the left hand pane. ...
    (microsoft.public.windowsxp.general)
  • Re: New to win 2000 prof
    ... Did you make any changes to Local Security Policy? ... the user right to logon locally. ... install will not fix the problem. ... >> the password to the domain user account ...
    (microsoft.public.win2000.group_policy)
  • RE: Event ID 529
    ... The source is clear - workstations that are not part of my ... SBS2003 domain share the same local network (it's a shared local network in ... This kind of issue may be caused by Application logon such as while Outlook ... is connecting to Exchange Server, or this is an automated dictionary attack ...
    (microsoft.public.windows.server.sbs)