Logon local to W2k workstation using domain account

From: Ratmoler Hamstak (hamstak_at_yahoo.com)
Date: 08/09/04 

Date: 8 Aug 2004 15:11:17 -0700

I have a win2k workstation which is a member of a domain on a home
network (set up as a domain for development/academic purposes). I am
receiving a "system was unable to log on..." message when I attempt to
use a domain account to log on locally (logging into the domain works
fine). The account policy is set to allow local logon; this is
established in the local, domain, and domain controller levels.
Opening the account policy in the workstation's local security policy
manager reveals that the effective security policy is opeartive for
the domain account in question. The domain account is not a member of
any groups affected by the "deny local login" policy, which I suspect
would override the "Log on locally" policy.

  The reason I need to log on locally is that I recently purchased a
Tritton NAS device for centralized file storage/ftp capabilities; I
chose an appliance over building a file server for low power, always
on, and small footprint benefits. I can only connect to it as a drive
from the workstation when logged in to the daomin if my win2k server
is on (I leave this off most of the time, and would prefer to); the
error is "no logon server avaialable to service the request". Logging
on locally using the domain account would clear up the problem, I
suspect. Creating a local user account is a possibility of course, but
I'd prefer to use a single account.

  One last thing: when logging in locally using a domain account, is
it necessary to prefix the account name with the domain name, as in
DOMAIN\Username? I tried this, but the dropdown for selecting the
login context grayed out, so I assumed that prefixing in this manner
performs domain login even if you have the local machine selected.

Thanks in advance.

Tom

Relevant Pages

  • Re: Group Policy "Caching"
    ... Since the AD based GPOs define the requirements that must ... allow a domain account to be used without it being subjected ... SCE client engine and its storage of the policy information ... > In my Local Policy I have "Hide Screen saver tab" = Disabled ...
    (microsoft.public.windows.group_policy)
  • Number of cached logons
    ... The situation has always been that once a user logs on to an NT/2K/XP ... machine with a domain account, that user can remove the computer from the ... Group Policy exposes the registry setting for this under Local Security ... Policy in "Interactive Logon: Number of cached logons......". ...
    (microsoft.public.win2000.group_policy)
  • Re: Pasword problem
    ... If it's domain account, installing a new server won't help. ... Check the Default domain Policy GPO. ... English blog: http://lordoftheping.blogspot.com ...
    (microsoft.public.windows.server.general)
  • RE: NT 4.0 domain account disabling
    ... There is no such policy or tool in Windows NT4 or Windows 2000 now that ... command line to disable/remove them. ... which could disable a domain account 100 days ...
    (microsoft.public.security)
  • Re: Problem getting w2kPro to become part of domain
    ... > machine that is member of Workgroup and a WinXp machine that is member of ... > using a domain account. ... But on the W2kPro I have same user name as a local ...
    (microsoft.public.windows.server.networking)