Local policy settings

  • Thread starter Thread starter Maurice Bishop
  • Start date Start date
M

Maurice Bishop

Greetings

I have just migrated 450 users successfully over to a Win2K server running
SP4 from NT4 SP6a.

I used the Active Directory Migration Tool (ADMT) and found that I can't
login as a user. I get the following message:

"The local policy of the system does not permit you to logon interactively."

I have checked the Group Policy addon and found logon deny set to nothing
and login allow set to everyone.

I can login as administrator on console, but can't login as anyone else -
even if I create a new user manually.

HELP!

TIA

Maurice
 
What's the scope of the problem? Just one PC, several PCs, all the PCs?
One user on one PC? One user on multiple PCs? Multiple users on ... you
get the idea. :-)

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm
 
Dear Richard,

The scope of the problem is pretty wide!

All PCs are affected. All users with the exception of administrator are
afftected.

Rgds

Maurice


Richard G. Harper said:
What's the scope of the problem? Just one PC, several PCs, all the PCs?
One user on one PC? One user on multiple PCs? Multiple users on ... you
get the idea. :-)

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


Maurice Bishop said:
Greetings

I have just migrated 450 users successfully over to a Win2K server
running SP4 from NT4 SP6a.

I used the Active Directory Migration Tool (ADMT) and found that I can't
login as a user. I get the following message:

"The local policy of the system does not permit you to logon
interactively."

I have checked the Group Policy addon and found logon deny set to nothing
and login allow set to everyone.

I can login as administrator on console, but can't login as anyone else -
even if I create a new user manually.

HELP!

TIA

Maurice
Click to expand...
Click to expand...
 
Ah, that gives us a better handle on the subject.

Do you have DNS working correctly in the domain? That is, is there one (or
more) DNS server(s) in your AD domain, with this/these servers set up to
resolve external addresses, and the clients in your domain looking ONLY at
the AD DNS server?

Have you checked your Active Directory Users and Computers list to see if
the domain migration worked correctly?

How about those domain policies? Did someone click where they should not
have and restrict logons at the GPO level?

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


Maurice Bishop said:
Dear Richard,

The scope of the problem is pretty wide!

All PCs are affected. All users with the exception of administrator are
afftected.

Rgds

Maurice


Richard G. Harper said:
What's the scope of the problem? Just one PC, several PCs, all the PCs?
One user on one PC? One user on multiple PCs? Multiple users on ... you
get the idea. :-)

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


Maurice Bishop said:
Greetings

I have just migrated 450 users successfully over to a Win2K server
running SP4 from NT4 SP6a.

I used the Active Directory Migration Tool (ADMT) and found that I can't
login as a user. I get the following message:

"The local policy of the system does not permit you to logon
interactively."

I have checked the Group Policy addon and found logon deny set to
nothing and login allow set to everyone.

I can login as administrator on console, but can't login as anyone
else - even if I create a new user manually.

HELP!

TIA

Maurice
Click to expand...
Click to expand...
Click to expand...
 
Back
Top