Deny logon locally

  • Thread starter Thread starter misslemike
  • Start date Start date
M

misslemike

My xp Client machine is in a Win2k AD domain. I cannot log
on users. Error message says "local policy does not permit
you to logon interactively". When I go to the local policy
only the administrators group is allowed on Logon Locally
policy. This cannot be changed even if I am the local
admin on the machine signed on locally. I checked all the
group policies on the Domain Controller and nothing is
configured to deny users to logon locally to their
machines. All GP's are not configured for Logon locally or
Deny logon locally. Please help.
 
Verify that the machine is actually getting the domain policies using RSOP
on the xp, and while you mentioned you checked the policies on the DC,
wasn't sure if that also included the default domain policy or any other
policies that might be over any OU etc that the machine account might be
under (if outside of the default Computers). Probably not the domain policy
if nobody else is having problems too, unless the box isn't getting any
policies at all.
Also check the event logs on the client and see what events/errors are
showing up (policy problems, secure channel issues, etc).
Once you're logged on as admin, are you able to do everything on the network
that you would expect to be able to do?

--
David Brandt
Microsoft Corporation

This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.
 
Back
Top