Re: Logging in interactively

From: marco (marco_at_discussions.microsoft.com)
Date: 10/29/04 

Date: Thu, 28 Oct 2004 20:39:02 -0700

This is happening on windows 2000 workstation clients machines....i did check
the local security policy on each client workstation and the 'users' group
(of which domain users are of a part of) are one of several groups allowed to
log in locally. Is there another policy i'm overlooking?

"Steven L Umbach" wrote:

> By default users can logon to all domain computers except domain
> controllers. When you check the Local Security Policy be sure to look at the
> effective setting for a user right. The deny logon locally user right will
> override the allow logon locally user right so be sure to check that which
> by default does not have any entries. For domain controllers, the Domain
> Controller Security Policy would have to be modified as those user rights
> are defined there and will override Local Security Policy for domain
> controllers. If you want to allow logon access to one domain controller, it
> would have to be moved to an OU within the domain controller container and a
> GPO configured for that OU to have logon locally configured to your needs.
> All other Domain Controller Security Policy would still apply to the OU in
> the domain controller container. --- Steve
>
>
> "marco" <marco@discussions.microsoft.com> wrote in message
> news:E4AC5B84-0AFA-438B-8062-EE3986751330@microsoft.com...
> >I just setup a windows 2000 server network. After installing AD, I created
> > the necessary accounts. These accounts only belong to the 'Domain Users'
> > group. When I test these accounts and the scripts on different PC's
> > (Which
> > have been added to the domain), I receive the message "The local policy
> > prevents this account from logging in interactively). I checked the local
> > policy settings as well as the domain policy settings and everything seems
> > fine. And I missing something? Please help!
> >
> > Mark
>
>
>

Relevant Pages

  • Re: I cant logon to my server with an Administrator .
    ... There is a Local Security Policy on all domain computers, however defined settings in ... Domain Controller Security Policy will override Local Security Policy defined ...
    (microsoft.public.win2000.group_policy)
  • Re: W2K AutoLogon Feature (234562)
    ... Terminal Services on a domain controller. ... the user right under Local Security Policy. ... > logon portion, I get an error that says "The local policy ...
    (microsoft.public.win2000.security)
  • Re: I cant logon to my server with an Administrator .
    ... Mine is a DC with a AD so that's no any local security policy tho. ... Default Domain controller security settings. ...
    (microsoft.public.win2000.group_policy)
  • Re: security log anomolies
    ... > have both account logon and logon events enabled for success and failure. ... > overriding Local Security Policy. ... > controllers in particular as Domain Controller Security Policy will override ...
    (microsoft.public.win2000.security)
  • Re: OU Delegation
    ... If you can not change Local Security Policy then their is another ... I guess that I will make the Child OU under the Domain Controller ... >> changing networking configuration, configuring Local Security Policy, ...
    (microsoft.public.win2000.active_directory)