Small Business Server 2003 > XP Pro > Log On.

[boston33]

Hello,

We have a Small Business Server 2003 Domain.

We use XP Pro workstations.

If we add a new AD user account, and we try to log on to a Windows XP Pro workstation, a message shows,"The local policy of this system does permit you to log on interactively." If we make the AD User account a local administrator of the particular w.station in the computer mmc of that computer, we can login ok. The message won't show any more.

Is there a way to login without making the user a local admin of this xp w.station? Where is this controlled, is it a Group Policy on the server? Thanks.

 

[tfg13]

It very well could be a policy on the domain, or, it could be a policy on the machine.

I would first look at what membership the user has on the domain, then, I would ensure that the workstation this person logs into has the "groups" listed in the local group policy (Computer Config->Security Settings->Local Policies->User Rights Assignment/Access this computer from the network and/or deny logon locally)