LOGON ISSUE! NEED HELP PLEASE

[wisdomwarrior23]

Are you familiar with this error message and how to resolve it:

The local policy of this system does not permit you to logon interactively.

I'm running a Win2k Advanced Server with Active Directory. I've checked all of my user accounts and passwords and the only account that seems to work is administrator. I know I've set the correct passwords and I'm typing them in correctly at logon. Guidance needed. Thanks.

 

[imatthec]

Win2k server does not allow any other than administrators to log onto the server itself. Its for security reasons. You can change this through group policy if its a must.

 

[koquito]

make sure your username have the rights to log on localy.check the policies applying to your username A+, MCP, CCNA
marbinpr@hotmail.com

Keep fighting for your knowledge!

 

[wisdomwarrior23]

The error message I receive is:

The local policy of this computer does not allow you to logon interactively.

I'm baffled by this problem the resolutions that I've found involve replacing a file on my system, but you have to take the file from another Win2k Advanced Server which I don't have access to. Any thoughts?

 

[CoolClark]

WW23, Have you checked the local policies of the server?

 

[cant]

On teh Server go to Start-Administrative tools-local Security settings- Local Plicies-User Right Assingment.
then double click the (Deny logon locally)add any user name you want.
good luck

 

[wisdomwarrior23]

I haven't thoroughly checked the local policies, hey cant what do I do once, I'm at deny logon locally I don't won't to deny anybody yet, I want to allow the accounts I setup to logon to the server which I'm having some trouble! Thanks fellas

 

[koquito]

wisdomw...
The server works different than workstations, the server is used to give Services to the network, and only certain users must have the right to lon in locally to it . If you create a user account in the server, it doesnt mean that user will have the right to log in the server.
IS your problem solved? or not yet? A+, MCP, CCNA
marbinpr@hotmail.com

Keep fighting for your knowledge!

 

[cant]

i cant beleive i did that

 

[tlcscousin]

Print operators group is allowed to logon usually, so that could be one workaround.

 

[wisdomwarrior23]

My problem isn't resolved, I should be able to create an account to allow someone to logon to my server, I understand the whole concept of services and what the server provides on the network, and I've been able to set this up before so I know its possible, but for some reason, my server will not let any account the ability to logon to it accept for administrator, this seemed to happen after I setup the FTP service. Any further suggestions.

 

[felixfong]

I would create a group for "local logon" users. Then add the group in to the "log on locally" right under "Group Policy" => "Default Domain Policy" of the Domain tree. Then issue the following command.

secedit /refreshpolicy machine_policy /enforce

Hope this help.

 

[abovebrd]

I had the same problem. I had to edit an entry in the "Local Security Policy"

At the moment I forget which option it was. I'll post back if I remember


** Control Panel
** Administrative Tools
** Local Security Policy

-Danny
dan@snoboarder.net

 

[BSDgod]

I was having the same problem too for weeks... I had to manually add names from the domain on a single computer through >Control panel > users on the computer that wanted to logon... I found out now that in >administrative tools >local security settings > Local policies > user rights assignment there is an option there called "logon locally" just add "domain users"