This might be helpful:
http://articles.techrepublic.com.com...1-5313668.html
"Paul Smith" <(E-Mail Removed)> wrote in message
news:OR%(E-Mail Removed)...
> funny thing is that the profile which is not working is a copy of a
> working one!!!! so all their settings are equal
>
> something must be wrong and i suspect its a GPO
>
> is there any other way?
>
>
>
> "R. McCarty" <PcEngWork-NoSpam_@mindspring.com> wrote in message
> news:(E-Mail Removed)...
>> Compare a User account group membership that allows login to a
>> newly created one. When the accounts were created which of the
>> User Templates was used ? Also check the "Account" (TAB) on
>> the user and see if logon times are restricted or access is limited to
>> only certain computers.
>>
>> "Paul Smith" <(E-Mail Removed)> wrote in message
>> news:%(E-Mail Removed)...
>>> any idea which GPO section could it be?
>>>
>>>
>>>
>>>
>>> "Anteaus" <(E-Mail Removed)> wrote in message
>>> news:C5B34A5E-8968-4893-958B-(E-Mail Removed)...
>>>> Check the group membership of these users.
>>>>
>>>> I'm suspecting that someone in the past created a policy that removes
>>>> the
>>>> right of ordinary domain users to access the account from the network.
>>>> It may
>>>> be that they have to be a member of an additional group to gain this
>>>> right.
>>>>
>>>>
>>>> "Paul Smith" wrote:
>>>>
>>>>> Cannot login using new accounts
>>>>>
>>>>> I am encountering logon problems when using new created
>>>>> profiles....some old
>>>>> profiles work well.
>>>>>
>>>>> problem: "The local policy of this system does not permit you to logon
>>>>> interactively"
>>>>>
>>>>> scenario:
>>>>>
>>>>> logins created on win 2003 server
>>>>> logging from an xp client connected to server
>>>>>
>>>>>
>>>>> any ideas?
>>>>>
>>>>> tnx
>>>>>
>>>>>
>>>>>
>>>
>>>
>>
>>
>
>