Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations TouchToneTommy on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Active Directory

Status
Not open for further replies.

jmausadmin

IS-IT--Management
Dec 20, 2001
3
US
To anyone woth an answer,

I have just recently finshed setting up a group policy in active directory. After I set up the policy I tried to login and I get the message "the local policy of this system does not permit you to logon interactively" If anyone can help I would appreciate it.

Thanks,
Jmausadmin
 
you tried logging onto a domain controller using an account that is a member of the domain users.
For security reasons the default local policy on a domain controller doesnt allow domain users to logon to a domain controller.
Log on as administrator, go to Local Security policy under Administrative tools. Under Local policies there is an option to allow everyone to logon interactively.
Or you can create a group policy on the Domain Controller container in Active Directory Users & Computers (in this case will overright the local security policy)
 
Your close, to log on to a domain controller:
start>programs>admin tools>Domain controller security policy, highlite user rights assignment, d-click log on locally and add the users or groups you wan't to allow. After that open the command prompt and type:
secedit /refreshpolicy machine_policy
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top