Interactive logon privilege disabled

[Bob Hood]

Set up XP Pro host. While "jdoe" islogged in locally, I
am trying to connect to workstation by establishing VPN
to network, then RDP to host computer. When I try to
logon as "jdoe", i get 'Your interactive logon privilege
has been disabled.' I CAN login using another allowed
username. However, I want jdoe to be able to logon,
whether in fornt of PCC, or connecting remotely. If
local user logs off, then I try RDP using her login name,
I get same error mesage.

Help!

 

[David Jones]

This error means that the account you're using is missing
a requirement to be able to use Remote Desktop.

The account you try to log in with must have the
following:

A password.

Be a member of the Administrators OR Remote Desktop Users
group

OR

Have the "Allow Login through Terminal Services" user
right.

You can check the third (the right) by
opening "gpedit.msc", and expanding Computer
Configuration->Windows Settings->Security Settings->Local
Policies->User Rights Assignment. The "Allow Login
through Terminal Services" right will be on the right-
hand pane, double-click it and add this account.

 

[nmaxwell]

I am seeing this identical thing. Here's more of my situation. Any
comments?

Windows 2000 SBS, no special security policy's applied or anything.
Domain account is added to the "Remote Desktop" group by XP, on the XP
box. I can go in and confirm it's there through MMC/Local Users and
Groups, but XP is adding it.

Yet, I get the "Your interactive logon privilege has been disabled..."

But, when I sign on as domain administrator, it works.

I've checked the local right and administrators and Remote Desktop are
supposed to be able to. Yet, something from the domain is squashing
it. I have two computers that were reloade two weeks ago doing it, as
well as as OEM Dell laptop.

Nathan

 

[skuhtu]

i dealt with this problem just this morning.




Because it's a 2000 AD system you have to make sure that the user in AD has 'logon to terminal server' option enabled as well as being in the remote users / administrators group on the local machine

this worked for me

cheers

skuhtu