Re: The Local Policy of This System Does Not Permit You to Logon Interactively

From: Steven L Umbach (n9rou_at_comcast.net)
Date: 10/07/03 

Date: Mon, 06 Oct 2003 23:44:56 GMT

That is interesting. Moving a computer to an OU with defined policy would only
override the Local Security Policy - not reset it. When you look in Local Security
Policy examine both the local setting and the effective setting. The effective
setting is the policy that is being applied, while the local policy is what is
defined in Local Security policy. --- Steve

"Jim" <jimATdmatter.com> wrote in message
news:%23UHltKGjDHA.2624@TK2MSFTNGP10.phx.gbl...
> Ok, thanks I will give that a try and let you know.
>
> As to the Local security policy, all my other workstations that are working
> ok, have all the local groups under 'Log on locally'. On the one that
> started working after setting up the OU on the server, it is the same as the
> others that are working properly. I guess setting up the OU resets the
> permissions to what they should be.
>
> Someone told me today that they have heard of this happening to workstations
> that were upgraded to Windows 2000 from Windows 98. Not sure if that's the
> case here but, on the one workstation I did a format and fresh install of
> Win2K, and it popped up again after installing MS project which forces a
> restart. I think that may have been a coincidence.
>
> Thanks,
>
> jim.....
>
>
> Steven L Umbach" <n9rou@comcast.net> wrote in message
> news:Emmgb.231655$mp.143106@rwcrnsc51.ops.asp.att.net...
> > Hi Jim. I have not heard of that. When you put the problem workstation in
> > the OU and were allowed to logon, did you check the Local Security Policy
> > for that machine in user rights assignments to see what was preventing the
> > logon?? I know a while back that there was virus/worm going around that
> > would run a secedit command on a computer to change the local policy
> > settings to deny the logon. Usually a user would notice a brief message on
> > the screen as it was executed. In regards to the KB link, try this. Also
> > configure the policy of the OU to contain just the guest account in deny
> > logon locally user right assignment. That way if the problem crops up
> again
> > and somehow your computers have a deny logon locally configured for the
> > users group, etc in Local Security Policy it will be overriden by the OU
> > policy to contain only the guest account. Good luck. --- Steve
> >
> > "Jim" <jimATdmatter.com> wrote in message
> > news:eXJOukBjDHA.4048@TK2MSFTNGP11.phx.gbl...
> > > We have been having a problem on our small Windows 2000 Server Domain.
> We
> > > have about 15 workstations all running win2kpro. So far 3 systems have
> > come
> > > up with the error 'The Local Policy of This System Does Not Permit You
> to
> > > Logon Interactively' when the user tries to logon. This after the
> systems
> > > were working ok for over a year. It appears to start happening on some
> > > workstations after installing Service Pack 4.
> > >
> > > I ran the fix suggested by Microsoft in article 'Knowledge Base
> Article -
> > > 285793'
> > >
> >
> http://support.microsoft.com/default.aspx?scid=kb;en-us;285793&Product=win2000
> > > which involves creating a new Organizational Unit. This worked for one
> of
> > > the workstations and not the other 2, so I reformatted and reinstalled
> W2K
> > > from scratch, since then one of the units has started coming up with
> this
> > > error again.
> > >
> > > When this message comes up during logon, it seems impossible to logon to
> > the
> > > system, either using the domain or logging on to the local computer with
> > or
> > > without Administrator access. This is frustrating. Any idea what's
> causing
> > > this, and any other solutions, short of not using Service Pack 4?
> > >
> > > Thanks,
> > >
> > > Jim.....
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: The Local Policy of This System Does Not Permit You to Logon Interactively
    ... As to the Local security policy, all my other workstations that are working ... Someone told me today that they have heard of this happening to workstations ... > the OU and were allowed to logon, did you check the Local Security Policy ... > settings to deny the logon. ...
    (microsoft.public.win2000.security)
  • Re: Users Cant logon to network - Help
    ... local security policy on the affected workstations to be edited? ... the workstation with any account (local administrator should work if domain ... but most of them seem to apply to admin or to remote workplace logon. ...
    (microsoft.public.windows.server.sbs)
  • RE: Remote Access Problems
    ... > workstations that no matter what I try, ... Specifically, Event Viewer, opening HKLM in regedit remotely, or ... > parts of the local security policy. ... > auditing of all fallures & successes in the local security policy, ...
    (microsoft.public.win2000.general)
  • Remote Access Problems
    ... workstations that no matter what I try, ... Specifically, Event Viewer, opening HKLM in regedit remotely, or ... parts of the local security policy. ... auditing of all fallures & successes in the local security policy, ...
    (microsoft.public.win2000.networking)
  • Remote Access Problems
    ... workstations that no matter what I try, ... Specifically, Event Viewer, opening HKLM in regedit remotely, or ... parts of the local security policy. ... auditing of all fallures & successes in the local security policy, ...
    (microsoft.public.win2000.general)