Re: Login Interactively

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 06/24/05

  • Next message: tophre: "Re: what the?? 2K3SP1" 
    Date: Fri, 24 Jun 2005 07:29:54 -0700

    Agreed. Rereading the post the inconsistent application does
    much indicate some systemic failure of domain infrastructure. 

    -- 
Roger Abell
Microsoft MVP (Windows  Security)
"Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
news:OiJwahHeFHA.2420@TK2MSFTNGP15.phx.gbl...
> Roger's advice as usual is right on. I just want to add that from your
> description you seem to have inconsistent application of Group Policy and
> that it seems that at the domain/OU level you configured the user rights
for
> logon locally and/or deny logon locally incorrectly. Keep in mind that
deny
> user right will override an allow user right. I would also suggest that
you
> make sure that your dns is correctly configured for the domain as per the
> first link below. Use the support tools netdiag, dcdiag, and gpotool on
your
> domain controller and the support tools netdiag and gpresult on your
domain
> member computers to check for proper network connectivity, dns name
> resolution, domain membership/secure channel, and replication for domain
> controllers.   --- Steve
>
> http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B291382
>
> "David" <dplotts@nospamaesarchitech.com> wrote in message
> news:eXqAt4%23dFHA.2752@TK2MSFTNGP10.phx.gbl...
> > We're running a domain with a Windows 2003 server as the pdc and a
Windows
> > 2000 server as the sdc.  All of the clients are XP Pro or 2000.
> >
> > I just enabled group policy so that all of the machines would get
> > automatic updates.
> >
> > Now when the majority of the users try to login they get "'The local
> > policy of this system does not permit you to logon interactively"
> >
> > If I reboot sometimes it will let them login.  Other times logging in as
> > administrator then trying to login as them works.
> >
> > Some users have no problem logging in.
> >
> > Is there some setting somewhere that configures this?
> >
> > I've already given everyone local login rights through the Domain
> > Controller Security Policy, but still get the error.
> >
> > Thanks
> >
>
>
  • Next message: tophre: "Re: what the?? 2K3SP1"

    Relevant Pages

    • Re: Login automatically
      ... Group Policy to lock down the login I want to use pretty tightly. ... When I set up windows 2k there is an option where Windows assumes a ... >> -Scott Elgram ...
      (microsoft.public.win2000.group_policy)
    • Request Help: I lost privileges after changing Network ID to a Workgroup from a domain, even though
      ... After changing the network ID from a domain to a workgroup, ... I receive 'Access Denied' message when I try to open the Group Policy ... but I had been logging into the defunct domain in the login screen until I ...
      (microsoft.public.windowsxp.security_admin)
    • Erratic slow login Win2k3 from XP SP2 - Profile GPO issue log usel
      ... On our network login times can vary for no obvious reason, ... There are long delays in processing the profile ... I have logged log in event using Group Policy core and registry ... I logged a client with a login delay, from entry of user name and password ...
      (microsoft.public.windows.group_policy)
    • Re: Logon interactively probmel after domain install
      ... rsop.msc to see if Group Policy at the domain level is enforcing any user ... But local users cannot ... login now, only admin can. ... "Local Security Settings\Users Rights Assignments"!! ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Blocking access to USB flash drives/external firewire devices
      ... Use Group Policy to disable USB, CD-ROM, Floppy Disk and LS-120 ... > Microsoft MVP - Windows Security ... >> I've been looking and looking for a way to block access to USB/firewire ...
      (microsoft.public.windows.server.networking)