Re: Login Interactively

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 06/24/05 

Date: Thu, 23 Jun 2005 23:54:39 -0500

Roger's advice as usual is right on. I just want to add that from your
description you seem to have inconsistent application of Group Policy and
that it seems that at the domain/OU level you configured the user rights for
logon locally and/or deny logon locally incorrectly. Keep in mind that deny
user right will override an allow user right. I would also suggest that you
make sure that your dns is correctly configured for the domain as per the
first link below. Use the support tools netdiag, dcdiag, and gpotool on your
domain controller and the support tools netdiag and gpresult on your domain
member computers to check for proper network connectivity, dns name
resolution, domain membership/secure channel, and replication for domain
controllers. --- Steve

http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B291382

"David" <dplotts@nospamaesarchitech.com> wrote in message
news:eXqAt4%23dFHA.2752@TK2MSFTNGP10.phx.gbl...
> We're running a domain with a Windows 2003 server as the pdc and a Windows
> 2000 server as the sdc. All of the clients are XP Pro or 2000.
>
> I just enabled group policy so that all of the machines would get
> automatic updates.
>
> Now when the majority of the users try to login they get "'The local
> policy of this system does not permit you to logon interactively"
>
> If I reboot sometimes it will let them login. Other times logging in as
> administrator then trying to login as them works.
>
> Some users have no problem logging in.
>
> Is there some setting somewhere that configures this?
>
> I've already given everyone local login rights through the Domain
> Controller Security Policy, but still get the error.
>
> Thanks
>

Relevant Pages

  • Re: Login Interactively
    ... much indicate some systemic failure of domain infrastructure. ... Microsoft MVP (Windows Security) ... >> I just enabled group policy so that all of the machines would get ... >> If I reboot sometimes it will let them login. ...
    (microsoft.public.windows.server.security)
  • Re: Login automatically
    ... Group Policy to lock down the login I want to use pretty tightly. ... When I set up windows 2k there is an option where Windows assumes a ... >> -Scott Elgram ...
    (microsoft.public.win2000.group_policy)
  • Request Help: I lost privileges after changing Network ID to a Workgroup from a domain, even though
    ... After changing the network ID from a domain to a workgroup, ... I receive 'Access Denied' message when I try to open the Group Policy ... but I had been logging into the defunct domain in the login screen until I ...
    (microsoft.public.windowsxp.security_admin)
  • Erratic slow login Win2k3 from XP SP2 - Profile GPO issue log usel
    ... On our network login times can vary for no obvious reason, ... There are long delays in processing the profile ... I have logged log in event using Group Policy core and registry ... I logged a client with a login delay, from entry of user name and password ...
    (microsoft.public.windows.group_policy)
  • Re: Logon interactively probmel after domain install
    ... rsop.msc to see if Group Policy at the domain level is enforcing any user ... But local users cannot ... login now, only admin can. ... "Local Security Settings\Users Rights Assignments"!! ...
    (microsoft.public.windowsxp.security_admin)