The local policy of this system does not permit you to logon Interactively

[Bob Dickson]

I am stuck on a remote desktop problem and hoping
somebody can help.

I have a Small Business server 2000 network with a VPN
router

I am trying to use remote desktop on a WinXP Pro client
with an ip address of xxx.xxx.xxx.70

Remotly i can connect to the VPN great and ping the ip of
this desired computer.

When I execute a remote desktop client I get a
connection and a login screen just like i am supposed to

However, when I try to logon using the user's Active
Directory Username and password I get the following
message:

"The local policy of this system does not permit you to
logon Interactively"

I have tried the advise of the knowledge base articles
285793 & 289289 but still have not been able to fix the
problem

Does anyone have any ideas?

Also should this be better posted on the win 2000 site?

Thanks in advance for the help

BD

 

[Jeffrey Randow (MVP)]

From the TS FAQ:

Error Message when attempting to log on: The local policy of this
system does not permit you to logon interactively
There are 2 likely causes of this error:

(1) You don't have "Allow logon to terminal server" checked in the
user's profile.

(2) The Terminal Server is functioning as a domain controller. Default
domain policies prohibit interactive logon to DCs by normal users for
very good reasons. The best resolution is to demote the TS to a member
server role. <-- Don't do this!!!!

Jeffrey Randow (Windows MVP - Networking & Smart Display)
(e-mail address removed)

Please post all responses to the newsgroups for the benefit
of all USENET users. Messages sent via email may or may not
be answered depending on time availability....

Remote Networking Technology Wiki -
http://www.remotenetworktechnology.com
Smart Display Support - http://www.smartdisplays.net
Windows XP Expert Zone - http://www.microsoft.com/windowsxp/expertzone