Remote Desktop Error

P

Pedro

Just installed XP Over a freshly installed 2000. All works
but the at the Remote Desktop connection I get the
following message:
"The local policy of this system does not permit you to
logon interactively"

I am trying with two accounts. One is a user with
administrator rights and the other is the administrator.
Both are registered as Remote Users in Control
Panel>>System>>Remote.

Anything else missing?

Thansk
 
B

Bill Sanderson

There's a thread in this group started 12/3 by bo, with the subject header
"Can't logon interactively."

I believe the answer that worked for bo will work for you as well, so see if
the search or google will find you that thread. Let me know on this thread
either way--I can cut and paste the references if you can't find it.
 
P

Pedro

Thanks for your answer, please paste the references since
the references that I find in Google are referring to
computers belonging to a domain controlers.
The two machines that I an trying to connect are not in a
domain controlled network nor they belong to one, just two
plain vanilla computers that I would like one (w2000) to
connect remotely to the other (xp)

Thanks
 
B

Bill Sanderson

Even though policy settings are most commonly used in domains, they may also
be set, or have unexpected values after an upgrade, in standalone machines.

In the thread I was thinking, of, this was the resolution:
-------------------------------------------------------------------
Thanks a million for pointing me in the right direction.
As it turns out in the "Local Policy | Users Rights
Assignment | Allow logon through Terminal Services" I
added the Local "Administrators" and the "Remote Desktop
Users" groups. For some reson these were missed during
the upgrade. Works fine now!
--------------------------------------------------------------

If you run secpol.msc (start, run, secpol.msc <enter>)
and navigate to Local Policies, User Rights Assignment, and look at "allow
logon through terminal services" in the right pane, what users or groups are
listed there?

I've got a single such machine (Windows 2000 upgraded to XP) that I can wake
up and query remotely--so I'm checking it--I've had no trouble with it, so
this isn't a universal issue, and my machine is part of a domain, so that is
also different from your situation, but..

On my own XP non-domain workstation, the sole entry on that permission is my
own user account, which is what I always user for Remote Desktop.

OK--On the domain member workstation which was an upgrade, this entry reads,
Administrators, Remote Desktop Users.

I think either way, the entry needs to include the users who will be using
Remote Desktop.
 
R

ryan

I have the same problem as Pedro.
I read http://support.microsoft.com/?kbid=289289 and do
as is says. It doesn't work.

In fact, my administrator account is already in the list
of "log on locally". And no account is in the list
of "deny log on locally".

I search carefully through all the group policies and all
policies look ok. And I grant previllege of any
suspecious policy to my account. It still doesn't work.

However, the message "The local policy of this system
does not permit you to logon interactively" must result
from some policy, right? I'm quite confused.

I almost give up...
I can work at least from VNC under win2000.
After I upgrade to winxp pro. If I don't log off, I can
use vnc normally. If I log off, I can't log in within VNC
windows. The same error message shows.

If anyone can help, it'll be really appreciated.

-----Original Message-----
In addition to Bill's comments, look at this KB article for possible help...

http://support.microsoft.com/?kbid=289289
group for the mutual benefit of all of us...
 
B

Bill Sanderson

That should be comprehensive--and in the end, it recommends looking at the
exact policy setting I do above in this thread.

I want to hear back from Ryan and Pedro what users and groups are specified
in "allow user to logon through terminal services?"
 
S

Sooner Al

Yeah, I was just not sure the last poster, "ryan", looked at your reply...

--
Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the mutual benefit of all of us...
The MS MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no rights...
 
J

Jeffrey Randow (MVP)

B

Bill Sanderson

So--betcha if you add a limited user to remote desktop users group, they get
no joy connecting?
 
J

Jeffrey Randow (MVP)

To be honest, I have never tried... (I'm guilty - I use the
Administrator account exclusively on non-domain machines)

Jeffrey Randow (Windows Net. & Smart Display MVP)
(e-mail address removed)

Please post all responses to the newsgroups for the benefit
of all USENET users. Messages sent via email may or may not
be answered depending on time availability....

Remote Networking Technology Support Site -
http://www.remotenetworktechnology.com
Smart Display Support - http://www.smartdisplays.net
Windows XP Expert Zone - http://www.microsoft.com/windowsxp/expertzone
 
B

Bill Sanderson

Do as I say, not as I do.
(guilty as charged)

Jeffrey Randow (MVP) said:
To be honest, I have never tried... (I'm guilty - I use the
Administrator account exclusively on non-domain machines)

Jeffrey Randow (Windows Net. & Smart Display MVP)
(e-mail address removed)

Please post all responses to the newsgroups for the benefit
of all USENET users. Messages sent via email may or may not
be answered depending on time availability....

Remote Networking Technology Support Site -
http://www.remotenetworktechnology.com
Smart Display Support - http://www.smartdisplays.net
Windows XP Expert Zone - http://www.microsoft.com/windowsxp/expertzone
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top