Local policy disallows interactive logon

[fitfixer]

I am upgrading a small school lan during summer, moving up from NT4 Server to Server 2003 standard edition with a new Domain, the clients are mostly Windows XP Pro, when I join an XP Pro machine to the new domain, it goes in OK, I can logon as a domain Admin and see the new Domain and configure the anti-virus updates
But when I setup a test account "Student" with basic rights and try to logon using that account, I get this error;
" The local system policy does not permit you to logon interactively"
Logging on to the domain using the administrators account works fine, I suspect that this is a local policy setting but I cannot see anything here that would block interactive logon, maybe its a legacy of the NT4 domain account
I would be grateful for any suggestions on this
Regards

FrankF
A+,Network+,MCSA

 

[ahmtech123]

Is this test account local or on the domain?

If local type gpedit.msc in run then navigate to Computer configuration -> Windows settings -> Security -> local policies-> Security options

What about adding domain users to the power users group...thats if you want them to have that right.

On your DC go to the group policy and check to see if security options -> interactive login is set correctly.

 

[fitfixer]

Thanks for the reply,
The test account is a domain account, we just want to give minimal rights to students and lockdown the desktop with a GPO,
Adding them to the power users group may be OK, I will be back onsite next week I will try it then and also look at the security options in the GPO

FrankF
A+,Network+,MCSA

 

[bcastner]

http://support.microsoft.com/?kbid=315276