DC Policy

[leobis]

Hi all,

from my domain controller (w2k Ad server) I always get this kind of warning when I try to login with a "common user" user name: - The local policy of this system does not permit to logon interactively".
So what is the action needed to login as a user in the domain controller Pc's?
Thanks for your help

Leonardo

 

[GlenJohnson]

What do you mean by common user? Are you trying to log on locally or to the domain? Glen A. Johnson
Microsoft Certified Professional
glen@nellsgiftbox.com


"The past, though it cannot be relived, can always be repaired."
John La Farge (1835-1910); U.S. artist.

 

[CoolClark]

Logon as Admin to the DC
Start->Programs->Administrative Tools->Local Security Policies
Open Local Policies->User Rights Assignments
DblClk Logon on Locally
Add the user

 

[leobis]

Hi GlenJohnson,

I try to logon to the domain

Leo

 

[GlenJohnson]

Hello, leobis. What do you mean by a common name? A typical user, admin? Not sure I understand. Did you try what coolclark suggested? Glen A. Johnson
Microsoft Certified Professional
glen@nellsgiftbox.com


"The past, though it cannot be relived, can always be repaired."
John La Farge (1835-1910); U.S. artist.

 

[leobis]

Hi Glen,

I mean Domain user;
I did what CoolClark suggested me, but rather than changing user right assignment from local policy I did it from Domain Controller local policy adding the "Domain-User" in the list, and now I can login with those users.
Is this correct?

Thanks again for your help

Leo

 

[CoolClark]

Be careful, that will allow those users to logon to ALL of your domain controllers. That's why I didn't suggest using the GPO. If you want those users to have that kind of access then yes that's the way to do it. Otherwise you need to set the local security policies.