Cannot Change User Rights Assignment

[kendaukcat]

I have just added a laptop to my domain. I am receiving the "the local security policy does not allow your account to log on interactively" error message.

I checked the local security policy and the local "Users" group does not have the log on locally user rights assignment.

Also, all of the groups are greyed out, so and I cannot change them with the local admin account, or the domain admin account.

As it stands right now, the only way I can get local users to log onto this laptop is to add them to the Administrators group or another with heightened security...which for obvious reasons I would like to avoid.

Anyone have any thoughts?

I logged onto another desktop on the domain and found the user rights assignement to be the same on it as well.

Thanks in Advance,

Ken

 

[tchatzi]

First of all, the local users have nothing to do with the domain users.

Second you have to add the name of the laptop at the 'Computer' session on the Domain Controler,

and also add a user with rights of 'domain user' again on the Domain Controler.

You can access it at the 'Avtive Directory Users and Computers' at the Administrator tools on the Domain Server.

Of course all of these are correct if you really have a domain .
Else, maybe you didn't ask the right question(no offense)

 

[bcastner]

http://support.microsoft.com/?kbid=315276

At the least:

ntrights +r SeNetworkLogonRight -u Users
ntrights -r SeDenyNetworkLogonRight -u Users

 

[kendaukcat]

I think I found the issue.

I checked the Users Rights assignement on domain secuirty policy on my DC. I noticed that (local)administrators was listed (along with all domain related accounts) but local)users was not. I added it here and am waiting for it to propogeate down to my laptop...my guess is that this will fix the issue.


Thanks for the attempts...sorry for the confusion...just difficult to explain domain\local security issues.