Interactive logon

[reepa]

Hi all

Just started to update all of my desktop machines to win2k, am running win2k sbs server, the first machine that i have installed has got an error when i try to logon "the local policy of this system does not allow you to logon interactively" (this is either logon to domain or locally) when i loaded the machine it allowed me to join the domain, but since then i can not even logon locally to that machine, whats happened? any ideas

 

[GrnEyedLdy]

Check the local group policy. Local Computer Policy|Computer Configuration|Windows Settings|Security Settings|Local Policy|User Rights Assignment|Log on Locally.


What does this setting show for who can log on locally?

If you cannot log on directly to this machine (as the Admin)to check this setting, do it from another machine by using Computer Management and choosing to manage another computer's Local Group Policy.

Also, do you have any GPO's set at the domain level?


Patty

 

[reepa]

Hi thanks for the reply, i do not have any gpo that have been set by me the only ones would be the default sbs ones, how do you manage the local policy remotetly (say from the server) in computer manager if i connect to the machine i can not see the policy.

 

[GrnEyedLdy]

From the server go to a Run line and type MMC. When your new MMC opens, click Console, Add/Remove snap in. On the Add/Remove snapin page click Add. Next choose Group Policy and click Add. Click the Browse button and then select the Computers tab. Choose the Radio button next to Another Computer. Browse for the other computer that you want to look at the group policy for, highlight it and click Add. Next click Ok, Ok, Finished, Closed and Ok. Now you are looking at a custom MMC (Microsoft Mangement Console) pointed at that particular machine.

Now you can check the local group policy to see if there are any restrictions in place pertaining to who can log on locally. You will find it under this setting under; Local Computer Policy|Computer Configuration|Windows Settings|Security Settings|Local Policy|User Rights Assignment|Log on Locally.


Hope this helps,

Patty

 

[reepa]

Hi

The only option that i have under security settings for that machine are ip security policies, there is no entry for any local policy. I have connected to the local machine via the mmc snapin as suggested. Any ideas?

Paul

 

[GrnEyedLdy]

Your Group Policy MMC should look like this,

-Local Computer Policy
-Computer Configuration
+Software Settings
-Windows Settings
Scripts
-Security Settings
+Account Polices
-Local Policies
+Audit Policies
User Rights Assignments
Security Options
+Public Key Policies
IP Sec Policies on Local Machine

Is this not what you see?

Patty