Can't log on locally to XP after RDP session

Guest · Jun 4, 2007

Sorry about the new thread - see background info below.

I still don't see a fix for this issue. Another bit of information - I am
able to log on at the console as a domain admin when the problem appears. If
I then log off, the non-admin user is able to log on without encountering the
error.

The problem we have is that we do not want to enable Terminal Services logon
in AD, as we are using it to restrict non-TS users from logging on to our TS.
So that workaround does not work for us.

Another question: Is there any way to apply the TS restrictions in AD to
just the Terminal Server, as opposed to having it affect everyone who uses
RDP to come into an XP host? We use TS and XP RDP hosts for different
purposes, and we would like to restrict who logs onto the TS. Right now,
when we disable a user's TS logon privilege in AD, it also prevents them from
logging onto an XP RDP host.

Glen

Hello,

It seems you are replying another post this newsgroup. If you have any
questions, please feel free to submit your question.

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

I have seen the same "BUG". Here's the scenario:

User A is logged into her XP Pro SP2 Dell Desktop. She requests
software to be installed and I use RDC to logon to her computer
remotely using the administrator account to complete the request. I
log off and then she tries to logon locally JUST AS SHE WAS PRIOR TO MY
REMOTE LOGIN, and she gets the "Your logon privilege has been disabled"
error message. This error message is for TERMINAL SERVICES LOGONS but
NOT FOR LOCAL LOGONS. So...why are we getting this message?

THe work-around above "allow logon to terminal server" in the AD Users
and Computers app masks the bug. It appears that once a remote login
takes place using RDC that the subsequent LOCAL logins use the REMOTE
DESKTOP CONNECTION login. You can reboot the computer and it will then
allow a local login without changing the "allow logon to terminal
server" setting in AD Users and Computers. Has anyone found a "fix" for
this?

David

Check the properties of the AD acct that cannot logon locally to the
machine. On the Terminal Services Profile tab, enable the "Allow logon
to terminal server" option. It appears that the computer gets "stuck"
in terminal services mode after a Remote Desktop user logs off. When a
domain user w/o the rights to logon via terminal services subsequently
tries to logon locally, they are denied access.

Two XP Pro machines with all updates. User locally logged onto machine A
using his AD logon. He logs off. From machine B I use Remote Desktops to
log on to machine A as the domain administrator. I log off, which causes a
disconnect. The user trys to locally log onto machine A and gets "Your
interactive logon privilege has been disabled. Please contact your system
administrator.". Local user does a restart and can log on OK. This is
repeatable and happens with multiple instances of Machine A. If, instead of
doing a log off, I do a restart when I am finished with the remote access,
the user can log on locally. But either way, once I have logged on through
Remote Desktops, the machine must be rebooted (restarted) to allow a local
user to log on.

Is this a bug or design? If a bug, what to do to fix it? If design.......?

Ken Zhao [MSFT] · Jun 5, 2007

Hello Glen,

Thank you for using newsgroup!

From your post, what is the exact error message?

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: Can't log on locally to XP after RDP session
| thread-index: Acemt30w/2CYl1XsQpCVm0szl5iigw==
| X-WBNR-Posting-Host: 207.46.193.207
| From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <[email protected]>
| Subject: Can't log on locally to XP after RDP session
| Date: Mon, 4 Jun 2007 07:49:01 -0700
| Lines: 78
| Message-ID: <[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| Newsgroups: microsoft.public.windowsxp.work_remotely
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windowsxp.work_remotely:1652
| NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
|
| Sorry about the new thread - see background info below.
|
| I still don't see a fix for this issue. Another bit of information - I
am
| able to log on at the console as a domain admin when the problem appears.
If
| I then log off, the non-admin user is able to log on without encountering
the
| error.
|
| The problem we have is that we do not want to enable Terminal Services
logon
| in AD, as we are using it to restrict non-TS users from logging on to our
TS.
| So that workaround does not work for us.
|
| Another question: Is there any way to apply the TS restrictions in AD to
| just the Terminal Server, as opposed to having it affect everyone who
uses
| RDP to come into an XP host? We use TS and XP RDP hosts for different
| purposes, and we would like to restrict who logs onto the TS. Right now,
| when we disable a user's TS logon privilege in AD, it also prevents them
from
| logging onto an XP RDP host.
|
| Glen
|
| Hello,
|
| It seems you are replying another post this newsgroup. If you have any
| questions, please feel free to submit your question.
|
| Thanks & Regards,
|
| Ken Zhao
|
| Microsoft Online Support
| Microsoft Global Technical Support Center
|
|
| I have seen the same "BUG". Here's the scenario:
|
| User A is logged into her XP Pro SP2 Dell Desktop. She requests
| software to be installed and I use RDC to logon to her computer
| remotely using the administrator account to complete the request. I
| log off and then she tries to logon locally JUST AS SHE WAS PRIOR TO MY
| REMOTE LOGIN, and she gets the "Your logon privilege has been disabled"
| error message. This error message is for TERMINAL SERVICES LOGONS but
| NOT FOR LOCAL LOGONS. So...why are we getting this message?
|
| THe work-around above "allow logon to terminal server" in the AD Users
| and Computers app masks the bug. It appears that once a remote login
| takes place using RDC that the subsequent LOCAL logins use the REMOTE
| DESKTOP CONNECTION login. You can reboot the computer and it will then
| allow a local login without changing the "allow logon to terminal
| server" setting in AD Users and Computers. Has anyone found a "fix" for
| this?
|
| David
|
|
| Check the properties of the AD acct that cannot logon locally to the
| machine. On the Terminal Services Profile tab, enable the "Allow logon
| to terminal server" option. It appears that the computer gets "stuck"
| in terminal services mode after a Remote Desktop user logs off. When a
| domain user w/o the rights to logon via terminal services subsequently
| tries to logon locally, they are denied access.
|
|
| Two XP Pro machines with all updates. User locally logged onto machine A
| using his AD logon. He logs off. From machine B I use Remote Desktops
to
| log on to machine A as the domain administrator. I log off, which causes
a
| disconnect. The user trys to locally log onto machine A and gets "Your
| interactive logon privilege has been disabled. Please contact your
system
| administrator.". Local user does a restart and can log on OK. This is
| repeatable and happens with multiple instances of Machine A. If, instead
of
| doing a log off, I do a restart when I am finished with the remote
access,
| the user can log on locally. But either way, once I have logged on
through
| Remote Desktops, the machine must be rebooted (restarted) to allow a
local
| user to log on.
|
| Is this a bug or design? If a bug, what to do to fix it? If
design.......?
| --
| Thanks.... Carl
|
|

Guest · Jun 5, 2007

The full message is:

Logon Message
Your interactive logon privilege has been disabled. Please contact your
system administrator.

"Ken Zhao [MSFT]" said:
Hello Glen,

Thank you for using newsgroup!

From your post, what is the exact error message?

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: Can't log on locally to XP after RDP session
| thread-index: Acemt30w/2CYl1XsQpCVm0szl5iigw==
| X-WBNR-Posting-Host: 207.46.193.207
| From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <[email protected]>
| Subject: Can't log on locally to XP after RDP session
| Date: Mon, 4 Jun 2007 07:49:01 -0700
| Lines: 78
| Message-ID: <[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| Newsgroups: microsoft.public.windowsxp.work_remotely
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windowsxp.work_remotely:1652
| NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
|
| Sorry about the new thread - see background info below.
|
| I still don't see a fix for this issue. Another bit of information - I
am
| able to log on at the console as a domain admin when the problem appears.
If
| I then log off, the non-admin user is able to log on without encountering
the
| error.
|
| The problem we have is that we do not want to enable Terminal Services
logon
| in AD, as we are using it to restrict non-TS users from logging on to our
TS.
| So that workaround does not work for us.
|
| Another question: Is there any way to apply the TS restrictions in AD to
| just the Terminal Server, as opposed to having it affect everyone who
uses
| RDP to come into an XP host? We use TS and XP RDP hosts for different
| purposes, and we would like to restrict who logs onto the TS. Right now,
| when we disable a user's TS logon privilege in AD, it also prevents them
from
| logging onto an XP RDP host.
|
| Glen
|
| Hello,
|
| It seems you are replying another post this newsgroup. If you have any
| questions, please feel free to submit your question.
|
| Thanks & Regards,
|
| Ken Zhao
|
| Microsoft Online Support
| Microsoft Global Technical Support Center
|
|
| I have seen the same "BUG". Here's the scenario:
|
| User A is logged into her XP Pro SP2 Dell Desktop. She requests
| software to be installed and I use RDC to logon to her computer
| remotely using the administrator account to complete the request. I
| log off and then she tries to logon locally JUST AS SHE WAS PRIOR TO MY
| REMOTE LOGIN, and she gets the "Your logon privilege has been disabled"
| error message. This error message is for TERMINAL SERVICES LOGONS but
| NOT FOR LOCAL LOGONS. So...why are we getting this message?
|
| THe work-around above "allow logon to terminal server" in the AD Users
| and Computers app masks the bug. It appears that once a remote login
| takes place using RDC that the subsequent LOCAL logins use the REMOTE
| DESKTOP CONNECTION login. You can reboot the computer and it will then
| allow a local login without changing the "allow logon to terminal
| server" setting in AD Users and Computers. Has anyone found a "fix" for
| this?
|
| David
|
|
| Check the properties of the AD acct that cannot logon locally to the
| machine. On the Terminal Services Profile tab, enable the "Allow logon
| to terminal server" option. It appears that the computer gets "stuck"
| in terminal services mode after a Remote Desktop user logs off. When a
| domain user w/o the rights to logon via terminal services subsequently
| tries to logon locally, they are denied access.
|
|
| Two XP Pro machines with all updates. User locally logged onto machine A
| using his AD logon. He logs off. From machine B I use Remote Desktops
to
| log on to machine A as the domain administrator. I log off, which causes
a
| disconnect. The user trys to locally log onto machine A and gets "Your
| interactive logon privilege has been disabled. Please contact your
system
| administrator.". Local user does a restart and can log on OK. This is
| repeatable and happens with multiple instances of Machine A. If, instead
of
| doing a log off, I do a restart when I am finished with the remote
access,
| the user can log on locally. But either way, once I have logged on
through
| Remote Desktops, the machine must be rebooted (restarted) to allow a
local
| user to log on.
|
| Is this a bug or design? If a bug, what to do to fix it? If
design.......?
| --
| Thanks.... Carl
|
|

Ken Zhao [MSFT] · Jun 6, 2007

Hello,

I found the following article about this error message. Please follow the
steps in the article to see if it can help.

265382: Error Message: Your Interactive Logon Privilege Has Been Disabled.
Please Contact Your System Administrator
http://support.microsoft.com/default.aspx?scid=kb;en-us;265382

In addition, I also want to provide you with the following methods to see
if it can help:

Method 1
=============
I would suggest you check the Windows 2000 Server. By default the user
created through SBS Admin console does not have permissions to logon to
terminal server. Please check whether the domain user account on the server
have a check in the box for "Allow logon to Terminal Server." Check the box
and test.

Method 2
=============
Edit the Windows registry on the Windows 2000 terminal server so that it
causes the Winlogon process to ignore the error.

1. Click Start, click Run, type regedit in the Open box, and then click OK.
WARNING: If you use Registry Editor incorrectly, you may cause serious
problems that may require you to reinstall your operating system. Microsoft
cannot guarantee that you can solve problems that result from using
Registry Editor incorrectly. Use Registry Editor at your own risk.

2. Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server

3. On the Edit menu, point to New, and then click DWORD Value.
4. In the New Value #1 box, type IgnoreRegUserConfigErrors, and then press
ENTER.
5. Right-click IgnoreRegUserConfigErrors, and then click Modify.
6. In the Value data box, type 1 (one), click Decimal, and then click OK.

For more information, please refer to the link below:
815266: "Your Interactive Logon Privilege Has Been Disabled" Error When You
Try to Log on to a Terminal Server
http://support.microsoft.com/default.aspx?scid=kb;en-us;815266

Hope that helps!

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: Can't log on locally to XP after RDP session
| thread-index: AcenfL20DwaxQErORZaDyIon+YJ5Vw==
| X-WBNR-Posting-Host: 207.46.193.207
| From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <[email protected]>
| References: <[email protected]>
<[email protected]>
| Subject: RE: Can't log on locally to XP after RDP session
| Date: Tue, 5 Jun 2007 07:21:00 -0700
| Lines: 152
| Message-ID: <[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| Newsgroups: microsoft.public.windowsxp.work_remotely
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windowsxp.work_remotely:1664
| NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
|
| The full message is:
|
| Logon Message
| Your interactive logon privilege has been disabled. Please contact your
| system administrator.
|
| ""Ken Zhao [MSFT]"" wrote:
|
| > Hello Glen,
| >
| > Thank you for using newsgroup!
| >
| > From your post, what is the exact error message?
| >
| > Thanks & Regards,
| >
| > Ken Zhao
| >
| > Microsoft Online Support
| > Microsoft Global Technical Support Center
| >
| > Get Secure! - www.microsoft.com/security
<http://www.microsoft.com/security>
| > ====================================================
| > When responding to posts, please "Reply to Group" via your newsreader
so
| > that others may learn and benefit from your issue.
| > ====================================================
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| >
| >
| >
| >
| > --------------------
| > | Thread-Topic: Can't log on locally to XP after RDP session
| > | thread-index: Acemt30w/2CYl1XsQpCVm0szl5iigw==
| > | X-WBNR-Posting-Host: 207.46.193.207
| > | From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <[email protected]>
| > | Subject: Can't log on locally to XP after RDP session
| > | Date: Mon, 4 Jun 2007 07:49:01 -0700
| > | Lines: 78
| > | Message-ID: <[email protected]>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| > | Newsgroups: microsoft.public.windowsxp.work_remotely
| > | Path: TK2MSFTNGHUB02.phx.gbl
| > | Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windowsxp.work_remotely:1652
| > | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| > | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| > |
| > | Sorry about the new thread - see background info below.
| > |
| > | I still don't see a fix for this issue. Another bit of information -
I
| > am
| > | able to log on at the console as a domain admin when the problem
appears.
| > If
| > | I then log off, the non-admin user is able to log on without
encountering
| > the
| > | error.
| > |
| > | The problem we have is that we do not want to enable Terminal
Services
| > logon
| > | in AD, as we are using it to restrict non-TS users from logging on to
our
| > TS.
| > | So that workaround does not work for us.
| > |
| > | Another question: Is there any way to apply the TS restrictions in
AD to
| > | just the Terminal Server, as opposed to having it affect everyone who
| > uses
| > | RDP to come into an XP host? We use TS and XP RDP hosts for
different
| > | purposes, and we would like to restrict who logs onto the TS. Right
now,
| > | when we disable a user's TS logon privilege in AD, it also prevents
them
| > from
| > | logging onto an XP RDP host.
| > |
| > | Glen
| > |
| > | Hello,
| > |
| > | It seems you are replying another post this newsgroup. If you have
any
| > | questions, please feel free to submit your question.
| > |
| > | Thanks & Regards,
| > |
| > | Ken Zhao
| > |
| > | Microsoft Online Support
| > | Microsoft Global Technical Support Center
| > |
| > |
| > | I have seen the same "BUG". Here's the scenario:
| > |
| > | User A is logged into her XP Pro SP2 Dell Desktop. She requests
| > | software to be installed and I use RDC to logon to her computer
| > | remotely using the administrator account to complete the request. I
| > | log off and then she tries to logon locally JUST AS SHE WAS PRIOR TO
MY
| > | REMOTE LOGIN, and she gets the "Your logon privilege has been
disabled"
| > | error message. This error message is for TERMINAL SERVICES LOGONS but
| > | NOT FOR LOCAL LOGONS. So...why are we getting this message?
| > |
| > | THe work-around above "allow logon to terminal server" in the AD Users
| > | and Computers app masks the bug. It appears that once a remote login
| > | takes place using RDC that the subsequent LOCAL logins use the REMOTE
| > | DESKTOP CONNECTION login. You can reboot the computer and it will
then
| > | allow a local login without changing the "allow logon to terminal
| > | server" setting in AD Users and Computers. Has anyone found a "fix"
for
| > | this?
| > |
| > | David
| > |
| > |
| > | Check the properties of the AD acct that cannot logon locally to the
| > | machine. On the Terminal Services Profile tab, enable the "Allow logon
| > | to terminal server" option. It appears that the computer gets "stuck"
| > | in terminal services mode after a Remote Desktop user logs off. When a
| > | domain user w/o the rights to logon via terminal services subsequently
| > | tries to logon locally, they are denied access.
| > |
| > |
| > | Two XP Pro machines with all updates. User locally logged onto
machine A
| > | using his AD logon. He logs off. From machine B I use Remote
Desktops
| > to
| > | log on to machine A as the domain administrator. I log off, which
causes
| > a
| > | disconnect. The user trys to locally log onto machine A and gets
"Your
| > | interactive logon privilege has been disabled. Please contact your
| > system
| > | administrator.". Local user does a restart and can log on OK. This
is
| > | repeatable and happens with multiple instances of Machine A. If,
instead
| > of
| > | doing a log off, I do a restart when I am finished with the remote
| > access,
| > | the user can log on locally. But either way, once I have logged on
| > through
| > | Remote Desktops, the machine must be rebooted (restarted) to allow a
| > local
| > | user to log on.
| > |
| > | Is this a bug or design? If a bug, what to do to fix it? If
| > design.......?
| > | --
| > | Thanks.... Carl
| > |
| > |
| >
| >
|

Ken Zhao [MSFT] · Jun 8, 2007

Hi,

I am just writing to see how everything is going. If you have any updates
or need any further assistance on this issue, please feel free to let me
know.

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| X-Tomcat-ID: 123345117
| References: <[email protected]>
<[email protected]>
<[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain
| Content-Transfer-Encoding: 7bit
| From: (e-mail address removed) ("Ken Zhao [MSFT]")
| Organization: Microsoft
| Date: Wed, 06 Jun 2007 09:18:33 GMT
| Subject: RE: Can't log on locally to XP after RDP session
| X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| Message-ID: <[email protected]>
| Newsgroups: microsoft.public.windowsxp.work_remotely
| Lines: 242
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windowsxp.work_remotely:1669
| NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
|
| Hello,
|
| I found the following article about this error message. Please follow the
| steps in the article to see if it can help.
|
| 265382: Error Message: Your Interactive Logon Privilege Has Been
Disabled.
| Please Contact Your System Administrator
| http://support.microsoft.com/default.aspx?scid=kb;en-us;265382
|
| In addition, I also want to provide you with the following methods to see
| if it can help:
|
| Method 1
| =============
| I would suggest you check the Windows 2000 Server. By default the user
| created through SBS Admin console does not have permissions to logon to
| terminal server. Please check whether the domain user account on the
server
| have a check in the box for "Allow logon to Terminal Server." Check the
box
| and test.
|
| Method 2
| =============
| Edit the Windows registry on the Windows 2000 terminal server so that it
| causes the Winlogon process to ignore the error.
|
| 1. Click Start, click Run, type regedit in the Open box, and then click
OK.
| WARNING: If you use Registry Editor incorrectly, you may cause serious
| problems that may require you to reinstall your operating system.
Microsoft
| cannot guarantee that you can solve problems that result from using
| Registry Editor incorrectly. Use Registry Editor at your own risk.
|
| 2. Locate the following registry subkey:
| HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server
|
| 3. On the Edit menu, point to New, and then click DWORD Value.
| 4. In the New Value #1 box, type IgnoreRegUserConfigErrors, and then
press
| ENTER.
| 5. Right-click IgnoreRegUserConfigErrors, and then click Modify.
| 6. In the Value data box, type 1 (one), click Decimal, and then click OK.
|
| For more information, please refer to the link below:
| 815266: "Your Interactive Logon Privilege Has Been Disabled" Error When
You
| Try to Log on to a Terminal Server
| http://support.microsoft.com/default.aspx?scid=kb;en-us;815266
|
| Hope that helps!
|
| Thanks & Regards,
|
| Ken Zhao
|
| Microsoft Online Support
| Microsoft Global Technical Support Center
|
| Get Secure! - www.microsoft.com/security
<http://www.microsoft.com/security>
| ====================================================
| When responding to posts, please "Reply to Group" via your newsreader so
| that others may learn and benefit from your issue.
| ====================================================
| This posting is provided "AS IS" with no warranties, and confers no
rights.
|
|
|
|
| --------------------
| | Thread-Topic: Can't log on locally to XP after RDP session
| | thread-index: AcenfL20DwaxQErORZaDyIon+YJ5Vw==
| | X-WBNR-Posting-Host: 207.46.193.207
| | From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <[email protected]>
| | References: <[email protected]>
| <[email protected]>
| | Subject: RE: Can't log on locally to XP after RDP session
| | Date: Tue, 5 Jun 2007 07:21:00 -0700
| | Lines: 152
| | Message-ID: <[email protected]>
| | MIME-Version: 1.0
| | Content-Type: text/plain;
| | charset="Utf-8"
| | Content-Transfer-Encoding: 7bit
| | X-Newsreader: Microsoft CDO for Windows 2000
| | Content-Class: urn:content-classes:message
| | Importance: normal
| | Priority: normal
| | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| | Newsgroups: microsoft.public.windowsxp.work_remotely
| | Path: TK2MSFTNGHUB02.phx.gbl
| | Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windowsxp.work_remotely:1664
| | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| |
| | The full message is:
| |
| | Logon Message
| | Your interactive logon privilege has been disabled. Please contact
your
| | system administrator.
| |
| | ""Ken Zhao [MSFT]"" wrote:
| |
| | > Hello Glen,
| | >
| | > Thank you for using newsgroup!
| | >
| | > From your post, what is the exact error message?
| | >
| | > Thanks & Regards,
| | >
| | > Ken Zhao
| | >
| | > Microsoft Online Support
| | > Microsoft Global Technical Support Center
| | >
| | > Get Secure! - www.microsoft.com/security
| <http://www.microsoft.com/security>
| | > ====================================================
| | > When responding to posts, please "Reply to Group" via your newsreader
| so
| | > that others may learn and benefit from your issue.
| | > ====================================================
| | > This posting is provided "AS IS" with no warranties, and confers no
| rights.
| | >
| | >
| | >
| | >
| | >
| | > --------------------
| | > | Thread-Topic: Can't log on locally to XP after RDP session
| | > | thread-index: Acemt30w/2CYl1XsQpCVm0szl5iigw==
| | > | X-WBNR-Posting-Host: 207.46.193.207
| | > | From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <[email protected]>
| | > | Subject: Can't log on locally to XP after RDP session
| | > | Date: Mon, 4 Jun 2007 07:49:01 -0700
| | > | Lines: 78
| | > | Message-ID: <[email protected]>
| | > | MIME-Version: 1.0
| | > | Content-Type: text/plain;
| | > | charset="Utf-8"
| | > | Content-Transfer-Encoding: 7bit
| | > | X-Newsreader: Microsoft CDO for Windows 2000
| | > | Content-Class: urn:content-classes:message
| | > | Importance: normal
| | > | Priority: normal
| | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| | > | Newsgroups: microsoft.public.windowsxp.work_remotely
| | > | Path: TK2MSFTNGHUB02.phx.gbl
| | > | Xref: TK2MSFTNGHUB02.phx.gbl
| microsoft.public.windowsxp.work_remotely:1652
| | > | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| | > | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| | > |
| | > | Sorry about the new thread - see background info below.
| | > |
| | > | I still don't see a fix for this issue. Another bit of information
-
| I
| | > am
| | > | able to log on at the console as a domain admin when the problem
| appears.
| | > If
| | > | I then log off, the non-admin user is able to log on without
| encountering
| | > the
| | > | error.
| | > |
| | > | The problem we have is that we do not want to enable Terminal
| Services
| | > logon
| | > | in AD, as we are using it to restrict non-TS users from logging on
to
| our
| | > TS.
| | > | So that workaround does not work for us.
| | > |
| | > | Another question: Is there any way to apply the TS restrictions in
| AD to
| | > | just the Terminal Server, as opposed to having it affect everyone
who
| | > uses
| | > | RDP to come into an XP host? We use TS and XP RDP hosts for
| different
| | > | purposes, and we would like to restrict who logs onto the TS.
Right
| now,
| | > | when we disable a user's TS logon privilege in AD, it also prevents
| them
| | > from
| | > | logging onto an XP RDP host.
| | > |
| | > | Glen
| | > |
| | > | Hello,
| | > |
| | > | It seems you are replying another post this newsgroup. If you have
| any
| | > | questions, please feel free to submit your question.
| | > |
| | > | Thanks & Regards,
| | > |
| | > | Ken Zhao
| | > |
| | > | Microsoft Online Support
| | > | Microsoft Global Technical Support Center
| | > |
| | > |
| | > | I have seen the same "BUG". Here's the scenario:
| | > |
| | > | User A is logged into her XP Pro SP2 Dell Desktop. She requests
| | > | software to be installed and I use RDC to logon to her computer
| | > | remotely using the administrator account to complete the request. I
| | > | log off and then she tries to logon locally JUST AS SHE WAS PRIOR
TO
| MY
| | > | REMOTE LOGIN, and she gets the "Your logon privilege has been
| disabled"
| | > | error message. This error message is for TERMINAL SERVICES LOGONS
but
| | > | NOT FOR LOCAL LOGONS. So...why are we getting this message?
| | > |
| | > | THe work-around above "allow logon to terminal server" in the AD
Users
| | > | and Computers app masks the bug. It appears that once a remote
login
| | > | takes place using RDC that the subsequent LOCAL logins use the
REMOTE
| | > | DESKTOP CONNECTION login. You can reboot the computer and it will
| then
| | > | allow a local login without changing the "allow logon to terminal
| | > | server" setting in AD Users and Computers. Has anyone found a "fix"
| for
| | > | this?
| | > |
| | > | David
| | > |
| | > |
| | > | Check the properties of the AD acct that cannot logon locally to the
| | > | machine. On the Terminal Services Profile tab, enable the "Allow
logon
| | > | to terminal server" option. It appears that the computer gets
"stuck"
| | > | in terminal services mode after a Remote Desktop user logs off.
When a
| | > | domain user w/o the rights to logon via terminal services
subsequently
| | > | tries to logon locally, they are denied access.
| | > |
| | > |
| | > | Two XP Pro machines with all updates. User locally logged onto
| machine A
| | > | using his AD logon. He logs off. From machine B I use Remote
| Desktops
| | > to
| | > | log on to machine A as the domain administrator. I log off, which
| causes
| | > a
| | > | disconnect. The user trys to locally log onto machine A and gets
| "Your
| | > | interactive logon privilege has been disabled. Please contact your
| | > system
| | > | administrator.". Local user does a restart and can log on OK.
This
| is
| | > | repeatable and happens with multiple instances of Machine A. If,
| instead
| | > of
| | > | doing a log off, I do a restart when I am finished with the remote
| | > access,
| | > | the user can log on locally. But either way, once I have logged on
| | > through
| | > | Remote Desktops, the machine must be rebooted (restarted) to allow
a
| | > local
| | > | user to log on.
| | > |
| | > | Is this a bug or design? If a bug, what to do to fix it? If
| | > design.......?
| | > | --
| | > | Thanks.... Carl
| | > |
| | > |
| | >
| | >
| |
|
|

Guest · Jun 14, 2007

Sorry - I wasn't receiving notifications on this thread, so I missed your
replies.

A few things to clarify:

1) The KB article you sent me is for problems logging on to a TS. The
problem is not with logging onto a TS, it is when logging onto XP Pro (see
the thread title, my original post, and the other posts in this thread).

2) We are running four servers, all of them Server 2003 (of some flavour).
The Terminal Server is 2003 R2 Enterprise Edition. We do not have any
Windows 2000, NT 4.0, or Small Business Server in our environment.

So so far, I still have the problem and no solution.

"Ken Zhao [MSFT]" said:
Hi,

I am just writing to see how everything is going. If you have any updates
or need any further assistance on this issue, please feel free to let me
know.

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| X-Tomcat-ID: 123345117
| References: <[email protected]>
<[email protected]>
<[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain
| Content-Transfer-Encoding: 7bit
| From: (e-mail address removed) ("Ken Zhao [MSFT]")
| Organization: Microsoft
| Date: Wed, 06 Jun 2007 09:18:33 GMT
| Subject: RE: Can't log on locally to XP after RDP session
| X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| Message-ID: <[email protected]>
| Newsgroups: microsoft.public.windowsxp.work_remotely
| Lines: 242
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windowsxp.work_remotely:1669
| NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
|
| Hello,
|
| I found the following article about this error message. Please follow the
| steps in the article to see if it can help.
|
| 265382: Error Message: Your Interactive Logon Privilege Has Been
Disabled.
| Please Contact Your System Administrator
| http://support.microsoft.com/default.aspx?scid=kb;en-us;265382
|
| In addition, I also want to provide you with the following methods to see
| if it can help:
|
| Method 1
| =============
| I would suggest you check the Windows 2000 Server. By default the user
| created through SBS Admin console does not have permissions to logon to
| terminal server. Please check whether the domain user account on the
server
| have a check in the box for "Allow logon to Terminal Server." Check the
box
| and test.
|
| Method 2
| =============
| Edit the Windows registry on the Windows 2000 terminal server so that it
| causes the Winlogon process to ignore the error.
|
| 1. Click Start, click Run, type regedit in the Open box, and then click
OK.
| WARNING: If you use Registry Editor incorrectly, you may cause serious
| problems that may require you to reinstall your operating system.
Microsoft
| cannot guarantee that you can solve problems that result from using
| Registry Editor incorrectly. Use Registry Editor at your own risk.
|
| 2. Locate the following registry subkey:
| HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server
|
| 3. On the Edit menu, point to New, and then click DWORD Value.
| 4. In the New Value #1 box, type IgnoreRegUserConfigErrors, and then
press
| ENTER.
| 5. Right-click IgnoreRegUserConfigErrors, and then click Modify.
| 6. In the Value data box, type 1 (one), click Decimal, and then click OK.
|
| For more information, please refer to the link below:
| 815266: "Your Interactive Logon Privilege Has Been Disabled" Error When
You
| Try to Log on to a Terminal Server
| http://support.microsoft.com/default.aspx?scid=kb;en-us;815266
|
| Hope that helps!
|
| Thanks & Regards,
|
| Ken Zhao
|
| Microsoft Online Support
| Microsoft Global Technical Support Center
|
| Get Secure! - www.microsoft.com/security
<http://www.microsoft.com/security>
| ====================================================
| When responding to posts, please "Reply to Group" via your newsreader so
| that others may learn and benefit from your issue.
| ====================================================
| This posting is provided "AS IS" with no warranties, and confers no
rights.
|
|
|
|
| --------------------
| | Thread-Topic: Can't log on locally to XP after RDP session
| | thread-index: AcenfL20DwaxQErORZaDyIon+YJ5Vw==
| | X-WBNR-Posting-Host: 207.46.193.207
| | From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <[email protected]>
| | References: <[email protected]>
| <[email protected]>
| | Subject: RE: Can't log on locally to XP after RDP session
| | Date: Tue, 5 Jun 2007 07:21:00 -0700
| | Lines: 152
| | Message-ID: <[email protected]>
| | MIME-Version: 1.0
| | Content-Type: text/plain;
| | charset="Utf-8"
| | Content-Transfer-Encoding: 7bit
| | X-Newsreader: Microsoft CDO for Windows 2000
| | Content-Class: urn:content-classes:message
| | Importance: normal
| | Priority: normal
| | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| | Newsgroups: microsoft.public.windowsxp.work_remotely
| | Path: TK2MSFTNGHUB02.phx.gbl
| | Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windowsxp.work_remotely:1664
| | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| |
| | The full message is:
| |
| | Logon Message
| | Your interactive logon privilege has been disabled. Please contact
your
| | system administrator.
| |
| | ""Ken Zhao [MSFT]"" wrote:
| |
| | > Hello Glen,
| | >
| | > Thank you for using newsgroup!
| | >
| | > From your post, what is the exact error message?
| | >
| | > Thanks & Regards,
| | >
| | > Ken Zhao
| | >
| | > Microsoft Online Support
| | > Microsoft Global Technical Support Center
| | >
| | > Get Secure! - www.microsoft.com/security
| <http://www.microsoft.com/security>
| | > ====================================================
| | > When responding to posts, please "Reply to Group" via your newsreader
| so
| | > that others may learn and benefit from your issue.
| | > ====================================================
| | > This posting is provided "AS IS" with no warranties, and confers no
| rights.
| | >
| | >
| | >
| | >
| | >
| | > --------------------
| | > | Thread-Topic: Can't log on locally to XP after RDP session
| | > | thread-index: Acemt30w/2CYl1XsQpCVm0szl5iigw==
| | > | X-WBNR-Posting-Host: 207.46.193.207
| | > | From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <[email protected]>
| | > | Subject: Can't log on locally to XP after RDP session
| | > | Date: Mon, 4 Jun 2007 07:49:01 -0700
| | > | Lines: 78
| | > | Message-ID: <[email protected]>
| | > | MIME-Version: 1.0
| | > | Content-Type: text/plain;
| | > | charset="Utf-8"
| | > | Content-Transfer-Encoding: 7bit
| | > | X-Newsreader: Microsoft CDO for Windows 2000
| | > | Content-Class: urn:content-classes:message
| | > | Importance: normal
| | > | Priority: normal
| | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| | > | Newsgroups: microsoft.public.windowsxp.work_remotely
| | > | Path: TK2MSFTNGHUB02.phx.gbl
| | > | Xref: TK2MSFTNGHUB02.phx.gbl
| microsoft.public.windowsxp.work_remotely:1652
| | > | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| | > | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| | > |
| | > | Sorry about the new thread - see background info below.
| | > |
| | > | I still don't see a fix for this issue. Another bit of information
-
| I
| | > am
| | > | able to log on at the console as a domain admin when the problem
| appears.
| | > If
| | > | I then log off, the non-admin user is able to log on without
| encountering
| | > the
| | > | error.
| | > |
| | > | The problem we have is that we do not want to enable Terminal
| Services
| | > logon
| | > | in AD, as we are using it to restrict non-TS users from logging on
to
| our
| | > TS.
| | > | So that workaround does not work for us.
| | > |
| | > | Another question: Is there any way to apply the TS restrictions in
| AD to
| | > | just the Terminal Server, as opposed to having it affect everyone
who
| | > uses
| | > | RDP to come into an XP host? We use TS and XP RDP hosts for
| different
| | > | purposes, and we would like to restrict who logs onto the TS.
Right
| now,
| | > | when we disable a user's TS logon privilege in AD, it also prevents
| them
| | > from
| | > | logging onto an XP RDP host.
| | > |
| | > | Glen
| | > |
| | > | Hello,
| | > |
| | > | It seems you are replying another post this newsgroup. If you have
| any
| | > | questions, please feel free to submit your question.
| | > |
| | > | Thanks & Regards,
| | > |
| | > | Ken Zhao
| | > |
| | > | Microsoft Online Support
| | > | Microsoft Global Technical Support Center
| | > |
| | > |
| | > | I have seen the same "BUG". Here's the scenario:
| | > |
| | > | User A is logged into her XP Pro SP2 Dell Desktop. She requests
| | > | software to be installed and I use RDC to logon to her computer
| | > | remotely using the administrator account to complete the request. I
| | > | log off and then she tries to logon locally JUST AS SHE WAS PRIOR
TO
| MY
| | > | REMOTE LOGIN, and she gets the "Your logon privilege has been
| disabled"
| | > | error message. This error message is for TERMINAL SERVICES LOGONS
but
| | > | NOT FOR LOCAL LOGONS. So...why are we getting this message?
| | > |
| | > | THe work-around above "allow logon to terminal server" in the AD
Users
| | > | and Computers app masks the bug. It appears that once a remote
login
| | > | takes place using RDC that the subsequent LOCAL logins use the
REMOTE
| | > | DESKTOP CONNECTION login. You can reboot the computer and it will
| then
| | > | allow a local login without changing the "allow logon to terminal
| | > | server" setting in AD Users and Computers. Has anyone found a "fix"
| for
| | > | this?
| | > |
| | > | David
| | > |
| | > |
| | > | Check the properties of the AD acct that cannot logon locally to the
| | > | machine. On the Terminal Services Profile tab, enable the "Allow
logon
| | > | to terminal server" option. It appears that the computer gets
"stuck"
| | > | in terminal services mode after a Remote Desktop user logs off.
When a
| | > | domain user w/o the rights to logon via terminal services
subsequently
| | > | tries to logon locally, they are denied access.
| | > |

Ken Zhao [MSFT] · Jun 18, 2007

Thanks for your reply and I will perform further research.

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: Can't log on locally to XP after RDP session
| thread-index: Aceum6t1gge3S4fNQYenkqG5LnEM+A==
| X-WBNR-Posting-Host: 207.46.193.207
| From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <[email protected]>
| References: <[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
| Subject: RE: Can't log on locally to XP after RDP session
| Date: Thu, 14 Jun 2007 08:50:02 -0700
| Lines: 317
| Message-ID: <[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| Newsgroups: microsoft.public.windowsxp.work_remotely
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windowsxp.work_remotely:1743
| NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
|
| Sorry - I wasn't receiving notifications on this thread, so I missed your
| replies.
|
| A few things to clarify:
|
| 1) The KB article you sent me is for problems logging on to a TS. The
| problem is not with logging onto a TS, it is when logging onto XP Pro
(see
| the thread title, my original post, and the other posts in this thread).
|
| 2) We are running four servers, all of them Server 2003 (of some
flavour).
| The Terminal Server is 2003 R2 Enterprise Edition. We do not have any
| Windows 2000, NT 4.0, or Small Business Server in our environment.
|
| So so far, I still have the problem and no solution.
|
| ""Ken Zhao [MSFT]"" wrote:
|
| > Hi,
| >
| > I am just writing to see how everything is going. If you have any
updates
| > or need any further assistance on this issue, please feel free to let
me
| > know.
| >
| > Thanks & Regards,
| >
| > Ken Zhao
| >
| > Microsoft Online Support
| > Microsoft Global Technical Support Center
| >
| > Get Secure! - www.microsoft.com/security
<http://www.microsoft.com/security>
| > ====================================================
| > When responding to posts, please "Reply to Group" via your newsreader
so
| > that others may learn and benefit from your issue.
| > ====================================================
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| >
| >
| >
| >
| > --------------------
| > | X-Tomcat-ID: 123345117
| > | References: <[email protected]>
| > <[email protected]>
| > <[email protected]>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain
| > | Content-Transfer-Encoding: 7bit
| > | From: (e-mail address removed) ("Ken Zhao [MSFT]")
| > | Organization: Microsoft
| > | Date: Wed, 06 Jun 2007 09:18:33 GMT
| > | Subject: RE: Can't log on locally to XP after RDP session
| > | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| > | Message-ID: <[email protected]>
| > | Newsgroups: microsoft.public.windowsxp.work_remotely
| > | Lines: 242
| > | Path: TK2MSFTNGHUB02.phx.gbl
| > | Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windowsxp.work_remotely:1669
| > | NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
| > |
| > | Hello,
| > |
| > | I found the following article about this error message. Please follow
the
| > | steps in the article to see if it can help.
| > |
| > | 265382: Error Message: Your Interactive Logon Privilege Has Been
| > Disabled.
| > | Please Contact Your System Administrator
| > | http://support.microsoft.com/default.aspx?scid=kb;en-us;265382
| > |
| > | In addition, I also want to provide you with the following methods to
see
| > | if it can help:
| > |
| > | Method 1
| > | =============
| > | I would suggest you check the Windows 2000 Server. By default the
user
| > | created through SBS Admin console does not have permissions to logon
to
| > | terminal server. Please check whether the domain user account on the
| > server
| > | have a check in the box for "Allow logon to Terminal Server." Check
the
| > box
| > | and test.
| > |
| > | Method 2
| > | =============
| > | Edit the Windows registry on the Windows 2000 terminal server so that
it
| > | causes the Winlogon process to ignore the error.
| > |
| > | 1. Click Start, click Run, type regedit in the Open box, and then
click
| > OK.
| > | WARNING: If you use Registry Editor incorrectly, you may cause
serious
| > | problems that may require you to reinstall your operating system.
| > Microsoft
| > | cannot guarantee that you can solve problems that result from using
| > | Registry Editor incorrectly. Use Registry Editor at your own risk.
| > |
| > | 2. Locate the following registry subkey:
| > | HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server
| > |
| > | 3. On the Edit menu, point to New, and then click DWORD Value.
| > | 4. In the New Value #1 box, type IgnoreRegUserConfigErrors, and then
| > press
| > | ENTER.
| > | 5. Right-click IgnoreRegUserConfigErrors, and then click Modify.
| > | 6. In the Value data box, type 1 (one), click Decimal, and then click
OK.
| > |
| > | For more information, please refer to the link below:
| > | 815266: "Your Interactive Logon Privilege Has Been Disabled" Error
When
| > You
| > | Try to Log on to a Terminal Server
| > | http://support.microsoft.com/default.aspx?scid=kb;en-us;815266
| > |
| > | Hope that helps!
| > |
| > | Thanks & Regards,
| > |
| > | Ken Zhao
| > |
| > | Microsoft Online Support
| > | Microsoft Global Technical Support Center
| > |
| > | Get Secure! - www.microsoft.com/security
| > <http://www.microsoft.com/security>
| > | ====================================================
| > | When responding to posts, please "Reply to Group" via your newsreader
so
| > | that others may learn and benefit from your issue.
| > | ====================================================
| > | This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| > |
| > |
| > |
| > |
| > | --------------------
| > | | Thread-Topic: Can't log on locally to XP after RDP session
| > | | thread-index: AcenfL20DwaxQErORZaDyIon+YJ5Vw==
| > | | X-WBNR-Posting-Host: 207.46.193.207
| > | | From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <[email protected]>
| > | | References: <[email protected]>
| > | <[email protected]>
| > | | Subject: RE: Can't log on locally to XP after RDP session
| > | | Date: Tue, 5 Jun 2007 07:21:00 -0700
| > | | Lines: 152
| > | | Message-ID: <[email protected]>
| > | | MIME-Version: 1.0
| > | | Content-Type: text/plain;
| > | | charset="Utf-8"
| > | | Content-Transfer-Encoding: 7bit
| > | | X-Newsreader: Microsoft CDO for Windows 2000
| > | | Content-Class: urn:content-classes:message
| > | | Importance: normal
| > | | Priority: normal
| > | | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| > | | Newsgroups: microsoft.public.windowsxp.work_remotely
| > | | Path: TK2MSFTNGHUB02.phx.gbl
| > | | Xref: TK2MSFTNGHUB02.phx.gbl
| > microsoft.public.windowsxp.work_remotely:1664
| > | | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| > | | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| > | |
| > | | The full message is:
| > | |
| > | | Logon Message
| > | | Your interactive logon privilege has been disabled. Please contact
| > your
| > | | system administrator.
| > | |
| > | | ""Ken Zhao [MSFT]"" wrote:
| > | |
| > | | > Hello Glen,
| > | | >
| > | | > Thank you for using newsgroup!
| > | | >
| > | | > From your post, what is the exact error message?
| > | | >
| > | | > Thanks & Regards,
| > | | >
| > | | > Ken Zhao
| > | | >
| > | | > Microsoft Online Support
| > | | > Microsoft Global Technical Support Center
| > | | >
| > | | > Get Secure! - www.microsoft.com/security
| > | <http://www.microsoft.com/security>
| > | | > ====================================================
| > | | > When responding to posts, please "Reply to Group" via your
newsreader
| > | so
| > | | > that others may learn and benefit from your issue.
| > | | > ====================================================
| > | | > This posting is provided "AS IS" with no warranties, and confers
no
| > | rights.
| > | | >
| > | | >
| > | | >
| > | | >
| > | | >
| > | | > --------------------
| > | | > | Thread-Topic: Can't log on locally to XP after RDP session
| > | | > | thread-index: Acemt30w/2CYl1XsQpCVm0szl5iigw==
| > | | > | X-WBNR-Posting-Host: 207.46.193.207
| > | | > | From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <[email protected]>
| > | | > | Subject: Can't log on locally to XP after RDP session
| > | | > | Date: Mon, 4 Jun 2007 07:49:01 -0700
| > | | > | Lines: 78
| > | | > | Message-ID: <[email protected]>
| > | | > | MIME-Version: 1.0
| > | | > | Content-Type: text/plain;
| > | | > | charset="Utf-8"
| > | | > | Content-Transfer-Encoding: 7bit
| > | | > | X-Newsreader: Microsoft CDO for Windows 2000
| > | | > | Content-Class: urn:content-classes:message
| > | | > | Importance: normal
| > | | > | Priority: normal
| > | | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| > | | > | Newsgroups: microsoft.public.windowsxp.work_remotely
| > | | > | Path: TK2MSFTNGHUB02.phx.gbl
| > | | > | Xref: TK2MSFTNGHUB02.phx.gbl
| > | microsoft.public.windowsxp.work_remotely:1652
| > | | > | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| > | | > | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| > | | > |
| > | | > | Sorry about the new thread - see background info below.
| > | | > |
| > | | > | I still don't see a fix for this issue. Another bit of
information
| > -
| > | I
| > | | > am
| > | | > | able to log on at the console as a domain admin when the
problem
| > | appears.
| > | | > If
| > | | > | I then log off, the non-admin user is able to log on without
| > | encountering
| > | | > the
| > | | > | error.
| > | | > |
| > | | > | The problem we have is that we do not want to enable Terminal
| > | Services
| > | | > logon
| > | | > | in AD, as we are using it to restrict non-TS users from logging
on
| > to
| > | our
| > | | > TS.
| > | | > | So that workaround does not work for us.
| > | | > |
| > | | > | Another question: Is there any way to apply the TS
restrictions in
| > | AD to
| > | | > | just the Terminal Server, as opposed to having it affect
everyone
| > who
| > | | > uses
| > | | > | RDP to come into an XP host? We use TS and XP RDP hosts for
| > | different
| > | | > | purposes, and we would like to restrict who logs onto the TS.
| > Right
| > | now,
| > | | > | when we disable a user's TS logon privilege in AD, it also
prevents
| > | them
| > | | > from
| > | | > | logging onto an XP RDP host.
| > | | > |
| > | | > | Glen
| > | | > |
| > | | > | Hello,
| > | | > |
| > | | > | It seems you are replying another post this newsgroup. If you
have
| > | any
| > | | > | questions, please feel free to submit your question.
| > | | > |
| > | | > | Thanks & Regards,
| > | | > |
| > | | > | Ken Zhao
| > | | > |
| > | | > | Microsoft Online Support
| > | | > | Microsoft Global Technical Support Center
| > | | > |
| > | | > |
| > | | > | I have seen the same "BUG". Here's the scenario:
| > | | > |
| > | | > | User A is logged into her XP Pro SP2 Dell Desktop. She requests
| > | | > | software to be installed and I use RDC to logon to her computer
| > | | > | remotely using the administrator account to complete the
request. I
| > | | > | log off and then she tries to logon locally JUST AS SHE WAS
PRIOR
| > TO
| > | MY
| > | | > | REMOTE LOGIN, and she gets the "Your logon privilege has been
| > | disabled"
| > | | > | error message. This error message is for TERMINAL SERVICES
LOGONS
| > but
| > | | > | NOT FOR LOCAL LOGONS. So...why are we getting this message?
| > | | > |
| > | | > | THe work-around above "allow logon to terminal server" in the
AD
| > Users
| > | | > | and Computers app masks the bug. It appears that once a remote
| > login
| > | | > | takes place using RDC that the subsequent LOCAL logins use the
| > REMOTE
| > | | > | DESKTOP CONNECTION login. You can reboot the computer and it
will
| > | then
| > | | > | allow a local login without changing the "allow logon to
terminal
| > | | > | server" setting in AD Users and Computers. Has anyone found a
"fix"
| > | for
| > | | > | this?
| > | | > |
| > | | > | David
| > | | > |
| > | | > |
| > | | > | Check the properties of the AD acct that cannot logon locally
to the
| > | | > | machine. On the Terminal Services Profile tab, enable the
"Allow
| > logon
| > | | > | to terminal server" option. It appears that the computer gets
| > "stuck"
| > | | > | in terminal services mode after a Remote Desktop user logs off.
| > When a
| > | | > | domain user w/o the rights to logon via terminal services
| > subsequently
| > | | > | tries to logon locally, they are denied access.
| > | | > |
|

Ken Zhao [MSFT] · Jun 20, 2007

Is this your exact error message you received "Your Interactive Logon
Privilege Has Been Disabled"?

Have you tired our suggestions I have delivered to you?

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: Can't log on locally to XP after RDP session
| thread-index: Aceum6t1gge3S4fNQYenkqG5LnEM+A==
| X-WBNR-Posting-Host: 207.46.193.207
| From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <[email protected]>
| References: <[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
| Subject: RE: Can't log on locally to XP after RDP session
| Date: Thu, 14 Jun 2007 08:50:02 -0700
| Lines: 317
| Message-ID: <[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| Newsgroups: microsoft.public.windowsxp.work_remotely
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windowsxp.work_remotely:1743
| NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
|
| Sorry - I wasn't receiving notifications on this thread, so I missed your
| replies.
|
| A few things to clarify:
|
| 1) The KB article you sent me is for problems logging on to a TS. The
| problem is not with logging onto a TS, it is when logging onto XP Pro
(see
| the thread title, my original post, and the other posts in this thread).
|
| 2) We are running four servers, all of them Server 2003 (of some
flavour).
| The Terminal Server is 2003 R2 Enterprise Edition. We do not have any
| Windows 2000, NT 4.0, or Small Business Server in our environment.
|
| So so far, I still have the problem and no solution.
|
| ""Ken Zhao [MSFT]"" wrote:
|
| > Hi,
| >
| > I am just writing to see how everything is going. If you have any
updates
| > or need any further assistance on this issue, please feel free to let
me
| > know.
| >
| > Thanks & Regards,
| >
| > Ken Zhao
| >
| > Microsoft Online Support
| > Microsoft Global Technical Support Center
| >
| > Get Secure! - www.microsoft.com/security
<http://www.microsoft.com/security>
| > ====================================================
| > When responding to posts, please "Reply to Group" via your newsreader
so
| > that others may learn and benefit from your issue.
| > ====================================================
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| >
| >
| >
| >
| > --------------------
| > | X-Tomcat-ID: 123345117
| > | References: <[email protected]>
| > <[email protected]>
| > <[email protected]>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain
| > | Content-Transfer-Encoding: 7bit
| > | From: (e-mail address removed) ("Ken Zhao [MSFT]")
| > | Organization: Microsoft
| > | Date: Wed, 06 Jun 2007 09:18:33 GMT
| > | Subject: RE: Can't log on locally to XP after RDP session
| > | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| > | Message-ID: <[email protected]>
| > | Newsgroups: microsoft.public.windowsxp.work_remotely
| > | Lines: 242
| > | Path: TK2MSFTNGHUB02.phx.gbl
| > | Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windowsxp.work_remotely:1669
| > | NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
| > |
| > | Hello,
| > |
| > | I found the following article about this error message. Please follow
the
| > | steps in the article to see if it can help.
| > |
| > | 265382: Error Message: Your Interactive Logon Privilege Has Been
| > Disabled.
| > | Please Contact Your System Administrator
| > | http://support.microsoft.com/default.aspx?scid=kb;en-us;265382
| > |
| > | In addition, I also want to provide you with the following methods to
see
| > | if it can help:
| > |
| > | Method 1
| > | =============
| > | I would suggest you check the Windows 2000 Server. By default the
user
| > | created through SBS Admin console does not have permissions to logon
to
| > | terminal server. Please check whether the domain user account on the
| > server
| > | have a check in the box for "Allow logon to Terminal Server." Check
the
| > box
| > | and test.
| > |
| > | Method 2
| > | =============
| > | Edit the Windows registry on the Windows 2000 terminal server so that
it
| > | causes the Winlogon process to ignore the error.
| > |
| > | 1. Click Start, click Run, type regedit in the Open box, and then
click
| > OK.
| > | WARNING: If you use Registry Editor incorrectly, you may cause
serious
| > | problems that may require you to reinstall your operating system.
| > Microsoft
| > | cannot guarantee that you can solve problems that result from using
| > | Registry Editor incorrectly. Use Registry Editor at your own risk.
| > |
| > | 2. Locate the following registry subkey:
| > | HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server
| > |
| > | 3. On the Edit menu, point to New, and then click DWORD Value.
| > | 4. In the New Value #1 box, type IgnoreRegUserConfigErrors, and then
| > press
| > | ENTER.
| > | 5. Right-click IgnoreRegUserConfigErrors, and then click Modify.
| > | 6. In the Value data box, type 1 (one), click Decimal, and then click
OK.
| > |
| > | For more information, please refer to the link below:
| > | 815266: "Your Interactive Logon Privilege Has Been Disabled" Error
When
| > You
| > | Try to Log on to a Terminal Server
| > | http://support.microsoft.com/default.aspx?scid=kb;en-us;815266
| > |
| > | Hope that helps!
| > |
| > | Thanks & Regards,
| > |
| > | Ken Zhao
| > |
| > | Microsoft Online Support
| > | Microsoft Global Technical Support Center
| > |
| > | Get Secure! - www.microsoft.com/security
| > <http://www.microsoft.com/security>
| > | ====================================================
| > | When responding to posts, please "Reply to Group" via your newsreader
so
| > | that others may learn and benefit from your issue.
| > | ====================================================
| > | This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| > |
| > |
| > |
| > |
| > | --------------------
| > | | Thread-Topic: Can't log on locally to XP after RDP session
| > | | thread-index: AcenfL20DwaxQErORZaDyIon+YJ5Vw==
| > | | X-WBNR-Posting-Host: 207.46.193.207
| > | | From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <[email protected]>
| > | | References: <[email protected]>
| > | <[email protected]>
| > | | Subject: RE: Can't log on locally to XP after RDP session
| > | | Date: Tue, 5 Jun 2007 07:21:00 -0700
| > | | Lines: 152
| > | | Message-ID: <[email protected]>
| > | | MIME-Version: 1.0
| > | | Content-Type: text/plain;
| > | | charset="Utf-8"
| > | | Content-Transfer-Encoding: 7bit
| > | | X-Newsreader: Microsoft CDO for Windows 2000
| > | | Content-Class: urn:content-classes:message
| > | | Importance: normal
| > | | Priority: normal
| > | | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| > | | Newsgroups: microsoft.public.windowsxp.work_remotely
| > | | Path: TK2MSFTNGHUB02.phx.gbl
| > | | Xref: TK2MSFTNGHUB02.phx.gbl
| > microsoft.public.windowsxp.work_remotely:1664
| > | | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| > | | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| > | |
| > | | The full message is:
| > | |
| > | | Logon Message
| > | | Your interactive logon privilege has been disabled. Please contact
| > your
| > | | system administrator.
| > | |
| > | | ""Ken Zhao [MSFT]"" wrote:
| > | |
| > | | > Hello Glen,
| > | | >
| > | | > Thank you for using newsgroup!
| > | | >
| > | | > From your post, what is the exact error message?
| > | | >
| > | | > Thanks & Regards,
| > | | >
| > | | > Ken Zhao
| > | | >
| > | | > Microsoft Online Support
| > | | > Microsoft Global Technical Support Center
| > | | >
| > | | > Get Secure! - www.microsoft.com/security
| > | <http://www.microsoft.com/security>
| > | | > ====================================================
| > | | > When responding to posts, please "Reply to Group" via your
newsreader
| > | so
| > | | > that others may learn and benefit from your issue.
| > | | > ====================================================
| > | | > This posting is provided "AS IS" with no warranties, and confers
no
| > | rights.
| > | | >
| > | | >
| > | | >
| > | | >
| > | | >
| > | | > --------------------
| > | | > | Thread-Topic: Can't log on locally to XP after RDP session
| > | | > | thread-index: Acemt30w/2CYl1XsQpCVm0szl5iigw==
| > | | > | X-WBNR-Posting-Host: 207.46.193.207
| > | | > | From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <[email protected]>
| > | | > | Subject: Can't log on locally to XP after RDP session
| > | | > | Date: Mon, 4 Jun 2007 07:49:01 -0700
| > | | > | Lines: 78
| > | | > | Message-ID: <[email protected]>
| > | | > | MIME-Version: 1.0
| > | | > | Content-Type: text/plain;
| > | | > | charset="Utf-8"
| > | | > | Content-Transfer-Encoding: 7bit
| > | | > | X-Newsreader: Microsoft CDO for Windows 2000
| > | | > | Content-Class: urn:content-classes:message
| > | | > | Importance: normal
| > | | > | Priority: normal
| > | | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| > | | > | Newsgroups: microsoft.public.windowsxp.work_remotely
| > | | > | Path: TK2MSFTNGHUB02.phx.gbl
| > | | > | Xref: TK2MSFTNGHUB02.phx.gbl
| > | microsoft.public.windowsxp.work_remotely:1652
| > | | > | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| > | | > | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| > | | > |
| > | | > | Sorry about the new thread - see background info below.
| > | | > |
| > | | > | I still don't see a fix for this issue. Another bit of
information
| > -
| > | I
| > | | > am
| > | | > | able to log on at the console as a domain admin when the
problem
| > | appears.
| > | | > If
| > | | > | I then log off, the non-admin user is able to log on without
| > | encountering
| > | | > the
| > | | > | error.
| > | | > |
| > | | > | The problem we have is that we do not want to enable Terminal
| > | Services
| > | | > logon
| > | | > | in AD, as we are using it to restrict non-TS users from logging
on
| > to
| > | our
| > | | > TS.
| > | | > | So that workaround does not work for us.
| > | | > |
| > | | > | Another question: Is there any way to apply the TS
restrictions in
| > | AD to
| > | | > | just the Terminal Server, as opposed to having it affect
everyone
| > who
| > | | > uses
| > | | > | RDP to come into an XP host? We use TS and XP RDP hosts for
| > | different
| > | | > | purposes, and we would like to restrict who logs onto the TS.
| > Right
| > | now,
| > | | > | when we disable a user's TS logon privilege in AD, it also
prevents
| > | them
| > | | > from
| > | | > | logging onto an XP RDP host.
| > | | > |
| > | | > | Glen
| > | | > |
| > | | > | Hello,
| > | | > |
| > | | > | It seems you are replying another post this newsgroup. If you
have
| > | any
| > | | > | questions, please feel free to submit your question.
| > | | > |
| > | | > | Thanks & Regards,
| > | | > |
| > | | > | Ken Zhao
| > | | > |
| > | | > | Microsoft Online Support
| > | | > | Microsoft Global Technical Support Center
| > | | > |
| > | | > |
| > | | > | I have seen the same "BUG". Here's the scenario:
| > | | > |
| > | | > | User A is logged into her XP Pro SP2 Dell Desktop. She requests
| > | | > | software to be installed and I use RDC to logon to her computer
| > | | > | remotely using the administrator account to complete the
request. I
| > | | > | log off and then she tries to logon locally JUST AS SHE WAS
PRIOR
| > TO
| > | MY
| > | | > | REMOTE LOGIN, and she gets the "Your logon privilege has been
| > | disabled"
| > | | > | error message. This error message is for TERMINAL SERVICES
LOGONS
| > but
| > | | > | NOT FOR LOCAL LOGONS. So...why are we getting this message?
| > | | > |
| > | | > | THe work-around above "allow logon to terminal server" in the
AD
| > Users
| > | | > | and Computers app masks the bug. It appears that once a remote
| > login
| > | | > | takes place using RDC that the subsequent LOCAL logins use the
| > REMOTE
| > | | > | DESKTOP CONNECTION login. You can reboot the computer and it
will
| > | then
| > | | > | allow a local login without changing the "allow logon to
terminal
| > | | > | server" setting in AD Users and Computers. Has anyone found a
"fix"
| > | for
| > | | > | this?
| > | | > |
| > | | > | David
| > | | > |
| > | | > |
| > | | > | Check the properties of the AD acct that cannot logon locally
to the
| > | | > | machine. On the Terminal Services Profile tab, enable the
"Allow
| > logon
| > | | > | to terminal server" option. It appears that the computer gets
| > "stuck"
| > | | > | in terminal services mode after a Remote Desktop user logs off.
| > When a
| > | | > | domain user w/o the rights to logon via terminal services
| > subsequently
| > | | > | tries to logon locally, they are denied access.
| > | | > |
|

Guest · Jun 20, 2007

Yes, this is the exact error message.

Please go back and read the thread thoroughly. As I said in my last post,
the suggestions you posted are not relevant to my situation.

"Ken Zhao [MSFT]" said:
Is this your exact error message you received "Your Interactive Logon
Privilege Has Been Disabled"?

Have you tired our suggestions I have delivered to you?

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: Can't log on locally to XP after RDP session
| thread-index: Aceum6t1gge3S4fNQYenkqG5LnEM+A==
| X-WBNR-Posting-Host: 207.46.193.207
| From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <[email protected]>
| References: <[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
| Subject: RE: Can't log on locally to XP after RDP session
| Date: Thu, 14 Jun 2007 08:50:02 -0700
| Lines: 317
| Message-ID: <[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| Newsgroups: microsoft.public.windowsxp.work_remotely
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windowsxp.work_remotely:1743
| NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
|
| Sorry - I wasn't receiving notifications on this thread, so I missed your
| replies.
|
| A few things to clarify:
|
| 1) The KB article you sent me is for problems logging on to a TS. The
| problem is not with logging onto a TS, it is when logging onto XP Pro
(see
| the thread title, my original post, and the other posts in this thread).
|
| 2) We are running four servers, all of them Server 2003 (of some
flavour).
| The Terminal Server is 2003 R2 Enterprise Edition. We do not have any
| Windows 2000, NT 4.0, or Small Business Server in our environment.
|
| So so far, I still have the problem and no solution.
|
| ""Ken Zhao [MSFT]"" wrote:
|
| > Hi,
| >
| > I am just writing to see how everything is going. If you have any
updates
| > or need any further assistance on this issue, please feel free to let
me
| > know.
| >
| > Thanks & Regards,
| >
| > Ken Zhao
| >
| > Microsoft Online Support
| > Microsoft Global Technical Support Center
| >
| > Get Secure! - www.microsoft.com/security
<http://www.microsoft.com/security>
| > ====================================================
| > When responding to posts, please "Reply to Group" via your newsreader
so
| > that others may learn and benefit from your issue.
| > ====================================================
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| >
| >
| >
| >
| > --------------------
| > | X-Tomcat-ID: 123345117
| > | References: <[email protected]>
| > <[email protected]>
| > <[email protected]>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain
| > | Content-Transfer-Encoding: 7bit
| > | From: (e-mail address removed) ("Ken Zhao [MSFT]")
| > | Organization: Microsoft
| > | Date: Wed, 06 Jun 2007 09:18:33 GMT
| > | Subject: RE: Can't log on locally to XP after RDP session
| > | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| > | Message-ID: <[email protected]>
| > | Newsgroups: microsoft.public.windowsxp.work_remotely
| > | Lines: 242
| > | Path: TK2MSFTNGHUB02.phx.gbl
| > | Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windowsxp.work_remotely:1669
| > | NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
| > |
| > | Hello,
| > |
| > | I found the following article about this error message. Please follow
the
| > | steps in the article to see if it can help.
| > |
| > | 265382: Error Message: Your Interactive Logon Privilege Has Been
| > Disabled.
| > | Please Contact Your System Administrator
| > | http://support.microsoft.com/default.aspx?scid=kb;en-us;265382
| > |
| > | In addition, I also want to provide you with the following methods to
see
| > | if it can help:
| > |
| > | Method 1
| > | =============
| > | I would suggest you check the Windows 2000 Server. By default the
user
| > | created through SBS Admin console does not have permissions to logon
to
| > | terminal server. Please check whether the domain user account on the
| > server
| > | have a check in the box for "Allow logon to Terminal Server." Check
the
| > box
| > | and test.
| > |
| > | Method 2
| > | =============
| > | Edit the Windows registry on the Windows 2000 terminal server so that
it
| > | causes the Winlogon process to ignore the error.
| > |
| > | 1. Click Start, click Run, type regedit in the Open box, and then
click
| > OK.
| > | WARNING: If you use Registry Editor incorrectly, you may cause
serious
| > | problems that may require you to reinstall your operating system.
| > Microsoft
| > | cannot guarantee that you can solve problems that result from using
| > | Registry Editor incorrectly. Use Registry Editor at your own risk.
| > |
| > | 2. Locate the following registry subkey:
| > | HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server
| > |
| > | 3. On the Edit menu, point to New, and then click DWORD Value.
| > | 4. In the New Value #1 box, type IgnoreRegUserConfigErrors, and then
| > press
| > | ENTER.
| > | 5. Right-click IgnoreRegUserConfigErrors, and then click Modify.
| > | 6. In the Value data box, type 1 (one), click Decimal, and then click
OK.
| > |
| > | For more information, please refer to the link below:
| > | 815266: "Your Interactive Logon Privilege Has Been Disabled" Error
When
| > You
| > | Try to Log on to a Terminal Server
| > | http://support.microsoft.com/default.aspx?scid=kb;en-us;815266
| > |
| > | Hope that helps!
| > |
| > | Thanks & Regards,
| > |
| > | Ken Zhao
| > |
| > | Microsoft Online Support
| > | Microsoft Global Technical Support Center
| > |
| > | Get Secure! - www.microsoft.com/security
| > <http://www.microsoft.com/security>
| > | ====================================================
| > | When responding to posts, please "Reply to Group" via your newsreader
so
| > | that others may learn and benefit from your issue.
| > | ====================================================
| > | This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| > |
| > |
| > |
| > |
| > | --------------------
| > | | Thread-Topic: Can't log on locally to XP after RDP session
| > | | thread-index: AcenfL20DwaxQErORZaDyIon+YJ5Vw==
| > | | X-WBNR-Posting-Host: 207.46.193.207
| > | | From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <[email protected]>
| > | | References: <[email protected]>
| > | <[email protected]>
| > | | Subject: RE: Can't log on locally to XP after RDP session
| > | | Date: Tue, 5 Jun 2007 07:21:00 -0700
| > | | Lines: 152
| > | | Message-ID: <[email protected]>
| > | | MIME-Version: 1.0
| > | | Content-Type: text/plain;
| > | | charset="Utf-8"
| > | | Content-Transfer-Encoding: 7bit
| > | | X-Newsreader: Microsoft CDO for Windows 2000
| > | | Content-Class: urn:content-classes:message
| > | | Importance: normal
| > | | Priority: normal
| > | | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| > | | Newsgroups: microsoft.public.windowsxp.work_remotely
| > | | Path: TK2MSFTNGHUB02.phx.gbl
| > | | Xref: TK2MSFTNGHUB02.phx.gbl
| > microsoft.public.windowsxp.work_remotely:1664
| > | | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| > | | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| > | |
| > | | The full message is:
| > | |
| > | | Logon Message
| > | | Your interactive logon privilege has been disabled. Please contact
| > your
| > | | system administrator.
| > | |
| > | | ""Ken Zhao [MSFT]"" wrote:
| > | |
| > | | > Hello Glen,
| > | | >
| > | | > Thank you for using newsgroup!
| > | | >
| > | | > From your post, what is the exact error message?
| > | | >
| > | | > Thanks & Regards,
| > | | >
| > | | > Ken Zhao
| > | | >
| > | | > Microsoft Online Support
| > | | > Microsoft Global Technical Support Center
| > | | >
| > | | > Get Secure! - www.microsoft.com/security
| > | <http://www.microsoft.com/security>
| > | | > ====================================================
| > | | > When responding to posts, please "Reply to Group" via your
newsreader
| > | so
| > | | > that others may learn and benefit from your issue.
| > | | > ====================================================
| > | | > This posting is provided "AS IS" with no warranties, and confers
no
| > | rights.
| > | | >
| > | | >
| > | | >
| > | | >
| > | | >
| > | | > --------------------
| > | | > | Thread-Topic: Can't log on locally to XP after RDP session
| > | | > | thread-index: Acemt30w/2CYl1XsQpCVm0szl5iigw==
| > | | > | X-WBNR-Posting-Host: 207.46.193.207
| > | | > | From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <[email protected]>
| > | | > | Subject: Can't log on locally to XP after RDP session
| > | | > | Date: Mon, 4 Jun 2007 07:49:01 -0700
| > | | > | Lines: 78
| > | | > | Message-ID: <[email protected]>
| > | | > | MIME-Version: 1.0
| > | | > | Content-Type: text/plain;
| > | | > | charset="Utf-8"
| > | | > | Content-Transfer-Encoding: 7bit
| > | | > | X-Newsreader: Microsoft CDO for Windows 2000
| > | | > | Content-Class: urn:content-classes:message
| > | | > | Importance: normal
| > | | > | Priority: normal
| > | | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| > | | > | Newsgroups: microsoft.public.windowsxp.work_remotely
| > | | > | Path: TK2MSFTNGHUB02.phx.gbl
| > | | > | Xref: TK2MSFTNGHUB02.phx.gbl
| > | microsoft.public.windowsxp.work_remotely:1652
| > | | > | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| > | | > | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| > | | > |
| > | | > | Sorry about the new thread - see background info below.
| > | | > |
| > | | > | I still don't see a fix for this issue. Another bit of
information
| > -
| > | I

Ken Zhao [MSFT] · Jun 21, 2007

Hello,

At this moment, I suggest you add "Domain Users" to the Remote Desktop
Users group on the problematic Windows XP machines to see if it can help
you resolve the issue.

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: Can't log on locally to XP after RDP session
| thread-index: AcezSUzhwI99+6SITj+QeggcD6sHFw==
| X-WBNR-Posting-Host: 207.46.193.207
| From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <[email protected]>
| References: <[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
| Subject: RE: Can't log on locally to XP after RDP session
| Date: Wed, 20 Jun 2007 07:43:00 -0700
| Lines: 307
| Message-ID: <[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| Newsgroups: microsoft.public.windowsxp.work_remotely
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windowsxp.work_remotely:1804
| NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
|
| Yes, this is the exact error message.
|
| Please go back and read the thread thoroughly. As I said in my last
post,
| the suggestions you posted are not relevant to my situation.
|
| ""Ken Zhao [MSFT]"" wrote:
|
| > Is this your exact error message you received "Your Interactive Logon
| > Privilege Has Been Disabled"?
| >
| > Have you tired our suggestions I have delivered to you?
| >
| > Thanks & Regards,
| >
| > Ken Zhao
| >
| > Microsoft Online Support
| > Microsoft Global Technical Support Center
| >
| > Get Secure! - www.microsoft.com/security
<http://www.microsoft.com/security>
| > ====================================================
| > When responding to posts, please "Reply to Group" via your newsreader
so
| > that others may learn and benefit from your issue.
| > ====================================================
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| >
| >
| >
| > --------------------
| > | Thread-Topic: Can't log on locally to XP after RDP session
| > | thread-index: Aceum6t1gge3S4fNQYenkqG5LnEM+A==
| > | X-WBNR-Posting-Host: 207.46.193.207
| > | From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <[email protected]>
| > | References: <[email protected]>
| > <[email protected]>
| > <[email protected]>
| > <[email protected]>
| > <[email protected]>
| > | Subject: RE: Can't log on locally to XP after RDP session
| > | Date: Thu, 14 Jun 2007 08:50:02 -0700
| > | Lines: 317
| > | Message-ID: <[email protected]>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| > | Newsgroups: microsoft.public.windowsxp.work_remotely
| > | Path: TK2MSFTNGHUB02.phx.gbl
| > | Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windowsxp.work_remotely:1743
| > | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| > | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| > |
| > | Sorry - I wasn't receiving notifications on this thread, so I missed
your
| > | replies.
| > |
| > | A few things to clarify:
| > |
| > | 1) The KB article you sent me is for problems logging on to a TS.
The
| > | problem is not with logging onto a TS, it is when logging onto XP Pro
| > (see
| > | the thread title, my original post, and the other posts in this
thread).
| > |
| > | 2) We are running four servers, all of them Server 2003 (of some
| > flavour).
| > | The Terminal Server is 2003 R2 Enterprise Edition. We do not have
any
| > | Windows 2000, NT 4.0, or Small Business Server in our environment.
| > |
| > | So so far, I still have the problem and no solution.
| > |
| > | ""Ken Zhao [MSFT]"" wrote:
| > |
| > | > Hi,
| > | >
| > | > I am just writing to see how everything is going. If you have any
| > updates
| > | > or need any further assistance on this issue, please feel free to
let
| > me
| > | > know.
| > | >
| > | > Thanks & Regards,
| > | >
| > | > Ken Zhao
| > | >
| > | > Microsoft Online Support
| > | > Microsoft Global Technical Support Center
| > | >
| > | > Get Secure! - www.microsoft.com/security
| > <http://www.microsoft.com/security>
| > | > ====================================================
| > | > When responding to posts, please "Reply to Group" via your
newsreader
| > so
| > | > that others may learn and benefit from your issue.
| > | > ====================================================
| > | > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| > | >
| > | >
| > | >
| > | >
| > | >
| > | > --------------------
| > | > | X-Tomcat-ID: 123345117
| > | > | References: <[email protected]>
| > | > <[email protected]>
| > | > <[email protected]>
| > | > | MIME-Version: 1.0
| > | > | Content-Type: text/plain
| > | > | Content-Transfer-Encoding: 7bit
| > | > | From: (e-mail address removed) ("Ken Zhao [MSFT]")
| > | > | Organization: Microsoft
| > | > | Date: Wed, 06 Jun 2007 09:18:33 GMT
| > | > | Subject: RE: Can't log on locally to XP after RDP session
| > | > | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| > | > | Message-ID: <[email protected]>
| > | > | Newsgroups: microsoft.public.windowsxp.work_remotely
| > | > | Lines: 242
| > | > | Path: TK2MSFTNGHUB02.phx.gbl
| > | > | Xref: TK2MSFTNGHUB02.phx.gbl
| > microsoft.public.windowsxp.work_remotely:1669
| > | > | NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
| > | > |
| > | > | Hello,
| > | > |
| > | > | I found the following article about this error message. Please
follow
| > the
| > | > | steps in the article to see if it can help.
| > | > |
| > | > | 265382: Error Message: Your Interactive Logon Privilege Has Been
| > | > Disabled.
| > | > | Please Contact Your System Administrator
| > | > | http://support.microsoft.com/default.aspx?scid=kb;en-us;265382
| > | > |
| > | > | In addition, I also want to provide you with the following
methods to
| > see
| > | > | if it can help:
| > | > |
| > | > | Method 1
| > | > | =============
| > | > | I would suggest you check the Windows 2000 Server. By default the
| > user
| > | > | created through SBS Admin console does not have permissions to
logon
| > to
| > | > | terminal server. Please check whether the domain user account on
the
| > | > server
| > | > | have a check in the box for "Allow logon to Terminal Server."
Check
| > the
| > | > box
| > | > | and test.
| > | > |
| > | > | Method 2
| > | > | =============
| > | > | Edit the Windows registry on the Windows 2000 terminal server so
that
| > it
| > | > | causes the Winlogon process to ignore the error.
| > | > |
| > | > | 1. Click Start, click Run, type regedit in the Open box, and then
| > click
| > | > OK.
| > | > | WARNING: If you use Registry Editor incorrectly, you may cause
| > serious
| > | > | problems that may require you to reinstall your operating system.
| > | > Microsoft
| > | > | cannot guarantee that you can solve problems that result from
using
| > | > | Registry Editor incorrectly. Use Registry Editor at your own
risk.
| > | > |
| > | > | 2. Locate the following registry subkey:
| > | > | HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal
Server
| > | > |
| > | > | 3. On the Edit menu, point to New, and then click DWORD Value.
| > | > | 4. In the New Value #1 box, type IgnoreRegUserConfigErrors, and
then
| > | > press
| > | > | ENTER.
| > | > | 5. Right-click IgnoreRegUserConfigErrors, and then click Modify.
| > | > | 6. In the Value data box, type 1 (one), click Decimal, and then
click
| > OK.
| > | > |
| > | > | For more information, please refer to the link below:
| > | > | 815266: "Your Interactive Logon Privilege Has Been Disabled"
Error
| > When
| > | > You
| > | > | Try to Log on to a Terminal Server
| > | > | http://support.microsoft.com/default.aspx?scid=kb;en-us;815266
| > | > |
| > | > | Hope that helps!
| > | > |
| > | > | Thanks & Regards,
| > | > |
| > | > | Ken Zhao
| > | > |
| > | > | Microsoft Online Support
| > | > | Microsoft Global Technical Support Center
| > | > |
| > | > | Get Secure! - www.microsoft.com/security
| > | > <http://www.microsoft.com/security>
| > | > | ====================================================
| > | > | When responding to posts, please "Reply to Group" via your
newsreader
| > so
| > | > | that others may learn and benefit from your issue.
| > | > | ====================================================
| > | > | This posting is provided "AS IS" with no warranties, and confers
no
| > | > rights.
| > | > |
| > | > |
| > | > |
| > | > |
| > | > | --------------------
| > | > | | Thread-Topic: Can't log on locally to XP after RDP session
| > | > | | thread-index: AcenfL20DwaxQErORZaDyIon+YJ5Vw==
| > | > | | X-WBNR-Posting-Host: 207.46.193.207
| > | > | | From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <[email protected]>
| > | > | | References:
<[email protected]>
| > | > | <[email protected]>
| > | > | | Subject: RE: Can't log on locally to XP after RDP session
| > | > | | Date: Tue, 5 Jun 2007 07:21:00 -0700
| > | > | | Lines: 152
| > | > | | Message-ID: <[email protected]>
| > | > | | MIME-Version: 1.0
| > | > | | Content-Type: text/plain;
| > | > | | charset="Utf-8"
| > | > | | Content-Transfer-Encoding: 7bit
| > | > | | X-Newsreader: Microsoft CDO for Windows 2000
| > | > | | Content-Class: urn:content-classes:message
| > | > | | Importance: normal
| > | > | | Priority: normal
| > | > | | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| > | > | | Newsgroups: microsoft.public.windowsxp.work_remotely
| > | > | | Path: TK2MSFTNGHUB02.phx.gbl
| > | > | | Xref: TK2MSFTNGHUB02.phx.gbl
| > | > microsoft.public.windowsxp.work_remotely:1664
| > | > | | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| > | > | | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| > | > | |
| > | > | | The full message is:
| > | > | |
| > | > | | Logon Message
| > | > | | Your interactive logon privilege has been disabled. Please
contact
| > | > your
| > | > | | system administrator.
| > | > | |
| > | > | | ""Ken Zhao [MSFT]"" wrote:
| > | > | |
| > | > | | > Hello Glen,
| > | > | | >
| > | > | | > Thank you for using newsgroup!
| > | > | | >
| > | > | | > From your post, what is the exact error message?
| > | > | | >
| > | > | | > Thanks & Regards,
| > | > | | >
| > | > | | > Ken Zhao
| > | > | | >
| > | > | | > Microsoft Online Support
| > | > | | > Microsoft Global Technical Support Center
| > | > | | >
| > | > | | > Get Secure! - www.microsoft.com/security
| > | > | <http://www.microsoft.com/security>
| > | > | | > ====================================================
| > | > | | > When responding to posts, please "Reply to Group" via your
| > newsreader
| > | > | so
| > | > | | > that others may learn and benefit from your issue.
| > | > | | > ====================================================
| > | > | | > This posting is provided "AS IS" with no warranties, and
confers
| > no
| > | > | rights.
| > | > | | >
| > | > | | >
| > | > | | >
| > | > | | >
| > | > | | >
| > | > | | > --------------------
| > | > | | > | Thread-Topic: Can't log on locally to XP after RDP session
| > | > | | > | thread-index: Acemt30w/2CYl1XsQpCVm0szl5iigw==
| > | > | | > | X-WBNR-Posting-Host: 207.46.193.207
| > | > | | > | From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?=
<[email protected]>
| > | > | | > | Subject: Can't log on locally to XP after RDP session
| > | > | | > | Date: Mon, 4 Jun 2007 07:49:01 -0700
| > | > | | > | Lines: 78
| > | > | | > | Message-ID:
<[email protected]>
| > | > | | > | MIME-Version: 1.0
| > | > | | > | Content-Type: text/plain;
| > | > | | > | charset="Utf-8"
| > | > | | > | Content-Transfer-Encoding: 7bit
| > | > | | > | X-Newsreader: Microsoft CDO for Windows 2000
| > | > | | > | Content-Class: urn:content-classes:message
| > | > | | > | Importance: normal
| > | > | | > | Priority: normal
| > | > | | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| > | > | | > | Newsgroups: microsoft.public.windowsxp.work_remotely
| > | > | | > | Path: TK2MSFTNGHUB02.phx.gbl
| > | > | | > | Xref: TK2MSFTNGHUB02.phx.gbl
| > | > | microsoft.public.windowsxp.work_remotely:1652
| > | > | | > | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| > | > | | > | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| > | > | | > |
| > | > | | > | Sorry about the new thread - see background info below.
| > | > | | > |
| > | > | | > | I still don't see a fix for this issue. Another bit of
| > information
| > | > -
| > | > | I
|

Ken Zhao [MSFT] · Jun 25, 2007

Hi,

I am just writing to see how everything is going. If you have any updates
or need any further assistance on this issue, please feel free to let me
know.

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| X-Tomcat-ID: 102504684
| References: <[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain
| Content-Transfer-Encoding: 7bit
| From: (e-mail address removed) ("Ken Zhao [MSFT]")
| Organization: Microsoft
| Date: Thu, 21 Jun 2007 08:20:22 GMT
| Subject: RE: Can't log on locally to XP after RDP session
| X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| Message-ID: <[email protected]>
| Newsgroups: microsoft.public.windowsxp.work_remotely
| Lines: 366
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windowsxp.work_remotely:1809
| NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
|
| Hello,
|
| At this moment, I suggest you add "Domain Users" to the Remote Desktop
| Users group on the problematic Windows XP machines to see if it can help
| you resolve the issue.
|
| Thanks & Regards,
|
| Ken Zhao
|
| Microsoft Online Support
| Microsoft Global Technical Support Center
|
| Get Secure! - www.microsoft.com/security
<http://www.microsoft.com/security>
| ====================================================
| When responding to posts, please "Reply to Group" via your newsreader so
| that others may learn and benefit from your issue.
| ====================================================
| This posting is provided "AS IS" with no warranties, and confers no
rights.
|
|
|
|
|
| --------------------
| | Thread-Topic: Can't log on locally to XP after RDP session
| | thread-index: AcezSUzhwI99+6SITj+QeggcD6sHFw==
| | X-WBNR-Posting-Host: 207.46.193.207
| | From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <[email protected]>
| | References: <[email protected]>
| <[email protected]>
| <[email protected]>
| <[email protected]>
| <[email protected]>
| <[email protected]>
| <[email protected]>
| | Subject: RE: Can't log on locally to XP after RDP session
| | Date: Wed, 20 Jun 2007 07:43:00 -0700
| | Lines: 307
| | Message-ID: <[email protected]>
| | MIME-Version: 1.0
| | Content-Type: text/plain;
| | charset="Utf-8"
| | Content-Transfer-Encoding: 7bit
| | X-Newsreader: Microsoft CDO for Windows 2000
| | Content-Class: urn:content-classes:message
| | Importance: normal
| | Priority: normal
| | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| | Newsgroups: microsoft.public.windowsxp.work_remotely
| | Path: TK2MSFTNGHUB02.phx.gbl
| | Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windowsxp.work_remotely:1804
| | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| |
| | Yes, this is the exact error message.
| |
| | Please go back and read the thread thoroughly. As I said in my last
| post,
| | the suggestions you posted are not relevant to my situation.
| |
| | ""Ken Zhao [MSFT]"" wrote:
| |
| | > Is this your exact error message you received "Your Interactive Logon
| | > Privilege Has Been Disabled"?
| | >
| | > Have you tired our suggestions I have delivered to you?
| | >
| | > Thanks & Regards,
| | >
| | > Ken Zhao
| | >
| | > Microsoft Online Support
| | > Microsoft Global Technical Support Center
| | >
| | > Get Secure! - www.microsoft.com/security
| <http://www.microsoft.com/security>
| | > ====================================================
| | > When responding to posts, please "Reply to Group" via your newsreader
| so
| | > that others may learn and benefit from your issue.
| | > ====================================================
| | > This posting is provided "AS IS" with no warranties, and confers no
| rights.
| | >
| | >
| | >
| | >
| | > --------------------
| | > | Thread-Topic: Can't log on locally to XP after RDP session
| | > | thread-index: Aceum6t1gge3S4fNQYenkqG5LnEM+A==
| | > | X-WBNR-Posting-Host: 207.46.193.207
| | > | From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <[email protected]>
| | > | References: <[email protected]>
| | > <[email protected]>
| | > <[email protected]>
| | > <[email protected]>
| | > <[email protected]>
| | > | Subject: RE: Can't log on locally to XP after RDP session
| | > | Date: Thu, 14 Jun 2007 08:50:02 -0700
| | > | Lines: 317
| | > | Message-ID: <[email protected]>
| | > | MIME-Version: 1.0
| | > | Content-Type: text/plain;
| | > | charset="Utf-8"
| | > | Content-Transfer-Encoding: 7bit
| | > | X-Newsreader: Microsoft CDO for Windows 2000
| | > | Content-Class: urn:content-classes:message
| | > | Importance: normal
| | > | Priority: normal
| | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| | > | Newsgroups: microsoft.public.windowsxp.work_remotely
| | > | Path: TK2MSFTNGHUB02.phx.gbl
| | > | Xref: TK2MSFTNGHUB02.phx.gbl
| microsoft.public.windowsxp.work_remotely:1743
| | > | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| | > | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| | > |
| | > | Sorry - I wasn't receiving notifications on this thread, so I
missed
| your
| | > | replies.
| | > |
| | > | A few things to clarify:
| | > |
| | > | 1) The KB article you sent me is for problems logging on to a TS.
| The
| | > | problem is not with logging onto a TS, it is when logging onto XP
Pro
| | > (see
| | > | the thread title, my original post, and the other posts in this
| thread).
| | > |
| | > | 2) We are running four servers, all of them Server 2003 (of some
| | > flavour).
| | > | The Terminal Server is 2003 R2 Enterprise Edition. We do not have
| any
| | > | Windows 2000, NT 4.0, or Small Business Server in our environment.
| | > |
| | > | So so far, I still have the problem and no solution.
| | > |
| | > | ""Ken Zhao [MSFT]"" wrote:
| | > |
| | > | > Hi,
| | > | >
| | > | > I am just writing to see how everything is going. If you have any
| | > updates
| | > | > or need any further assistance on this issue, please feel free to
| let
| | > me
| | > | > know.
| | > | >
| | > | > Thanks & Regards,
| | > | >
| | > | > Ken Zhao
| | > | >
| | > | > Microsoft Online Support
| | > | > Microsoft Global Technical Support Center
| | > | >
| | > | > Get Secure! - www.microsoft.com/security
| | > <http://www.microsoft.com/security>
| | > | > ====================================================
| | > | > When responding to posts, please "Reply to Group" via your
| newsreader
| | > so
| | > | > that others may learn and benefit from your issue.
| | > | > ====================================================
| | > | > This posting is provided "AS IS" with no warranties, and confers
no
| | > rights.
| | > | >
| | > | >
| | > | >
| | > | >
| | > | >
| | > | > --------------------
| | > | > | X-Tomcat-ID: 123345117
| | > | > | References:
<[email protected]>
| | > | > <[email protected]>
| | > | > <[email protected]>
| | > | > | MIME-Version: 1.0
| | > | > | Content-Type: text/plain
| | > | > | Content-Transfer-Encoding: 7bit
| | > | > | From: (e-mail address removed) ("Ken Zhao [MSFT]")
| | > | > | Organization: Microsoft
| | > | > | Date: Wed, 06 Jun 2007 09:18:33 GMT
| | > | > | Subject: RE: Can't log on locally to XP after RDP session
| | > | > | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| | > | > | Message-ID: <[email protected]>
| | > | > | Newsgroups: microsoft.public.windowsxp.work_remotely
| | > | > | Lines: 242
| | > | > | Path: TK2MSFTNGHUB02.phx.gbl
| | > | > | Xref: TK2MSFTNGHUB02.phx.gbl
| | > microsoft.public.windowsxp.work_remotely:1669
| | > | > | NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
| | > | > |
| | > | > | Hello,
| | > | > |
| | > | > | I found the following article about this error message. Please
| follow
| | > the
| | > | > | steps in the article to see if it can help.
| | > | > |
| | > | > | 265382: Error Message: Your Interactive Logon Privilege Has
Been
| | > | > Disabled.
| | > | > | Please Contact Your System Administrator
| | > | > | http://support.microsoft.com/default.aspx?scid=kb;en-us;265382
| | > | > |
| | > | > | In addition, I also want to provide you with the following
| methods to
| | > see
| | > | > | if it can help:
| | > | > |
| | > | > | Method 1
| | > | > | =============
| | > | > | I would suggest you check the Windows 2000 Server. By default
the
| | > user
| | > | > | created through SBS Admin console does not have permissions to
| logon
| | > to
| | > | > | terminal server. Please check whether the domain user account
on
| the
| | > | > server
| | > | > | have a check in the box for "Allow logon to Terminal Server."
| Check
| | > the
| | > | > box
| | > | > | and test.
| | > | > |
| | > | > | Method 2
| | > | > | =============
| | > | > | Edit the Windows registry on the Windows 2000 terminal server
so
| that
| | > it
| | > | > | causes the Winlogon process to ignore the error.
| | > | > |
| | > | > | 1. Click Start, click Run, type regedit in the Open box, and
then
| | > click
| | > | > OK.
| | > | > | WARNING: If you use Registry Editor incorrectly, you may cause
| | > serious
| | > | > | problems that may require you to reinstall your operating
system.
| | > | > Microsoft
| | > | > | cannot guarantee that you can solve problems that result from
| using
| | > | > | Registry Editor incorrectly. Use Registry Editor at your own
| risk.
| | > | > |
| | > | > | 2. Locate the following registry subkey:
| | > | > | HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal
| Server
| | > | > |
| | > | > | 3. On the Edit menu, point to New, and then click DWORD Value.
| | > | > | 4. In the New Value #1 box, type IgnoreRegUserConfigErrors, and
| then
| | > | > press
| | > | > | ENTER.
| | > | > | 5. Right-click IgnoreRegUserConfigErrors, and then click
Modify.
| | > | > | 6. In the Value data box, type 1 (one), click Decimal, and then
| click
| | > OK.
| | > | > |
| | > | > | For more information, please refer to the link below:
| | > | > | 815266: "Your Interactive Logon Privilege Has Been Disabled"
| Error
| | > When
| | > | > You
| | > | > | Try to Log on to a Terminal Server
| | > | > | http://support.microsoft.com/default.aspx?scid=kb;en-us;815266
| | > | > |
| | > | > | Hope that helps!
| | > | > |
| | > | > | Thanks & Regards,
| | > | > |
| | > | > | Ken Zhao
| | > | > |
| | > | > | Microsoft Online Support
| | > | > | Microsoft Global Technical Support Center
| | > | > |
| | > | > | Get Secure! - www.microsoft.com/security
| | > | > <http://www.microsoft.com/security>
| | > | > | ====================================================
| | > | > | When responding to posts, please "Reply to Group" via your
| newsreader
| | > so
| | > | > | that others may learn and benefit from your issue.
| | > | > | ====================================================
| | > | > | This posting is provided "AS IS" with no warranties, and
confers
| no
| | > | > rights.
| | > | > |
| | > | > |
| | > | > |
| | > | > |
| | > | > | --------------------
| | > | > | | Thread-Topic: Can't log on locally to XP after RDP session
| | > | > | | thread-index: AcenfL20DwaxQErORZaDyIon+YJ5Vw==
| | > | > | | X-WBNR-Posting-Host: 207.46.193.207
| | > | > | | From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?=
<[email protected]>
| | > | > | | References:
| <[email protected]>
| | > | > | <[email protected]>
| | > | > | | Subject: RE: Can't log on locally to XP after RDP session
| | > | > | | Date: Tue, 5 Jun 2007 07:21:00 -0700
| | > | > | | Lines: 152
| | > | > | | Message-ID:
<[email protected]>
| | > | > | | MIME-Version: 1.0
| | > | > | | Content-Type: text/plain;
| | > | > | | charset="Utf-8"
| | > | > | | Content-Transfer-Encoding: 7bit
| | > | > | | X-Newsreader: Microsoft CDO for Windows 2000
| | > | > | | Content-Class: urn:content-classes:message
| | > | > | | Importance: normal
| | > | > | | Priority: normal
| | > | > | | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| | > | > | | Newsgroups: microsoft.public.windowsxp.work_remotely
| | > | > | | Path: TK2MSFTNGHUB02.phx.gbl
| | > | > | | Xref: TK2MSFTNGHUB02.phx.gbl
| | > | > microsoft.public.windowsxp.work_remotely:1664
| | > | > | | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| | > | > | | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| | > | > | |
| | > | > | | The full message is:
| | > | > | |
| | > | > | | Logon Message
| | > | > | | Your interactive logon privilege has been disabled. Please
| contact
| | > | > your
| | > | > | | system administrator.
| | > | > | |
| | > | > | | ""Ken Zhao [MSFT]"" wrote:
| | > | > | |
| | > | > | | > Hello Glen,
| | > | > | | >
| | > | > | | > Thank you for using newsgroup!
| | > | > | | >
| | > | > | | > From your post, what is the exact error message?
| | > | > | | >
| | > | > | | > Thanks & Regards,
| | > | > | | >
| | > | > | | > Ken Zhao
| | > | > | | >
| | > | > | | > Microsoft Online Support
| | > | > | | > Microsoft Global Technical Support Center
| | > | > | | >
| | > | > | | > Get Secure! - www.microsoft.com/security
| | > | > | <http://www.microsoft.com/security>
| | > | > | | > ====================================================
| | > | > | | > When responding to posts, please "Reply to Group" via your
| | > newsreader
| | > | > | so
| | > | > | | > that others may learn and benefit from your issue.
| | > | > | | > ====================================================
| | > | > | | > This posting is provided "AS IS" with no warranties, and
| confers
| | > no
| | > | > | rights.
| | > | > | | >
| | > | > | | >
| | > | > | | >
| | > | > | | >
| | > | > | | >
| | > | > | | > --------------------
| | > | > | | > | Thread-Topic: Can't log on locally to XP after RDP session
| | > | > | | > | thread-index: Acemt30w/2CYl1XsQpCVm0szl5iigw==
| | > | > | | > | X-WBNR-Posting-Host: 207.46.193.207
| | > | > | | > | From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?=
| <[email protected]>
| | > | > | | > | Subject: Can't log on locally to XP after RDP session
| | > | > | | > | Date: Mon, 4 Jun 2007 07:49:01 -0700
| | > | > | | > | Lines: 78
| | > | > | | > | Message-ID:
| <[email protected]>
| | > | > | | > | MIME-Version: 1.0
| | > | > | | > | Content-Type: text/plain;
| | > | > | | > | charset="Utf-8"
| | > | > | | > | Content-Transfer-Encoding: 7bit
| | > | > | | > | X-Newsreader: Microsoft CDO for Windows 2000
| | > | > | | > | Content-Class: urn:content-classes:message
| | > | > | | > | Importance: normal
| | > | > | | > | Priority: normal
| | > | > | | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| | > | > | | > | Newsgroups: microsoft.public.windowsxp.work_remotely
| | > | > | | > | Path: TK2MSFTNGHUB02.phx.gbl
| | > | > | | > | Xref: TK2MSFTNGHUB02.phx.gbl
| | > | > | microsoft.public.windowsxp.work_remotely:1652
| | > | > | | > | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| | > | > | | > | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| | > | > | | > |
| | > | > | | > | Sorry about the new thread - see background info below.
| | > | > | | > |
| | > | > | | > | I still don't see a fix for this issue. Another bit of
| | > information
| | > | > -
| | > | > | I
| |
|
|

Guest · Jun 25, 2007

Thanks for the suggestion, but this did not resolve the problem (even after a
reboot).

"Ken Zhao [MSFT]" said:
Hello,

At this moment, I suggest you add "Domain Users" to the Remote Desktop
Users group on the problematic Windows XP machines to see if it can help
you resolve the issue.

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: Can't log on locally to XP after RDP session
| thread-index: AcezSUzhwI99+6SITj+QeggcD6sHFw==
| X-WBNR-Posting-Host: 207.46.193.207
| From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <[email protected]>
| References: <[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
| Subject: RE: Can't log on locally to XP after RDP session
| Date: Wed, 20 Jun 2007 07:43:00 -0700
| Lines: 307
| Message-ID: <[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| Newsgroups: microsoft.public.windowsxp.work_remotely
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windowsxp.work_remotely:1804
| NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
|
| Yes, this is the exact error message.
|
| Please go back and read the thread thoroughly. As I said in my last
post,
| the suggestions you posted are not relevant to my situation.
|
| ""Ken Zhao [MSFT]"" wrote:
|
| > Is this your exact error message you received "Your Interactive Logon
| > Privilege Has Been Disabled"?
| >
| > Have you tired our suggestions I have delivered to you?
| >
| > Thanks & Regards,
| >
| > Ken Zhao
| >
| > Microsoft Online Support
| > Microsoft Global Technical Support Center
| >
| > Get Secure! - www.microsoft.com/security
<http://www.microsoft.com/security>
| > ====================================================
| > When responding to posts, please "Reply to Group" via your newsreader
so
| > that others may learn and benefit from your issue.
| > ====================================================
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| >
| >
| >
| > --------------------
| > | Thread-Topic: Can't log on locally to XP after RDP session
| > | thread-index: Aceum6t1gge3S4fNQYenkqG5LnEM+A==
| > | X-WBNR-Posting-Host: 207.46.193.207
| > | From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <[email protected]>
| > | References: <[email protected]>
| > <[email protected]>
| > <[email protected]>
| > <[email protected]>
| > <[email protected]>
| > | Subject: RE: Can't log on locally to XP after RDP session
| > | Date: Thu, 14 Jun 2007 08:50:02 -0700
| > | Lines: 317
| > | Message-ID: <[email protected]>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| > | Newsgroups: microsoft.public.windowsxp.work_remotely
| > | Path: TK2MSFTNGHUB02.phx.gbl
| > | Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windowsxp.work_remotely:1743
| > | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| > | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| > |
| > | Sorry - I wasn't receiving notifications on this thread, so I missed
your
| > | replies.
| > |
| > | A few things to clarify:
| > |
| > | 1) The KB article you sent me is for problems logging on to a TS.
The
| > | problem is not with logging onto a TS, it is when logging onto XP Pro
| > (see
| > | the thread title, my original post, and the other posts in this
thread).
| > |
| > | 2) We are running four servers, all of them Server 2003 (of some
| > flavour).
| > | The Terminal Server is 2003 R2 Enterprise Edition. We do not have
any
| > | Windows 2000, NT 4.0, or Small Business Server in our environment.
| > |
| > | So so far, I still have the problem and no solution.
| > |
| > | ""Ken Zhao [MSFT]"" wrote:
| > |
| > | > Hi,
| > | >
| > | > I am just writing to see how everything is going. If you have any
| > updates
| > | > or need any further assistance on this issue, please feel free to
let
| > me
| > | > know.
| > | >
| > | > Thanks & Regards,
| > | >
| > | > Ken Zhao
| > | >
| > | > Microsoft Online Support
| > | > Microsoft Global Technical Support Center
| > | >
| > | > Get Secure! - www.microsoft.com/security
| > <http://www.microsoft.com/security>
| > | > ====================================================
| > | > When responding to posts, please "Reply to Group" via your
newsreader
| > so
| > | > that others may learn and benefit from your issue.
| > | > ====================================================
| > | > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| > | >
| > | >
| > | >
| > | >
| > | >
| > | > --------------------
| > | > | X-Tomcat-ID: 123345117
| > | > | References: <[email protected]>
| > | > <[email protected]>
| > | > <[email protected]>
| > | > | MIME-Version: 1.0
| > | > | Content-Type: text/plain
| > | > | Content-Transfer-Encoding: 7bit
| > | > | From: (e-mail address removed) ("Ken Zhao [MSFT]")
| > | > | Organization: Microsoft
| > | > | Date: Wed, 06 Jun 2007 09:18:33 GMT
| > | > | Subject: RE: Can't log on locally to XP after RDP session
| > | > | X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
| > | > | Message-ID: <[email protected]>
| > | > | Newsgroups: microsoft.public.windowsxp.work_remotely
| > | > | Lines: 242
| > | > | Path: TK2MSFTNGHUB02.phx.gbl
| > | > | Xref: TK2MSFTNGHUB02.phx.gbl
| > microsoft.public.windowsxp.work_remotely:1669
| > | > | NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
| > | > |
| > | > | Hello,
| > | > |
| > | > | I found the following article about this error message. Please
follow
| > the
| > | > | steps in the article to see if it can help.
| > | > |
| > | > | 265382: Error Message: Your Interactive Logon Privilege Has Been
| > | > Disabled.
| > | > | Please Contact Your System Administrator
| > | > | http://support.microsoft.com/default.aspx?scid=kb;en-us;265382
| > | > |
| > | > | In addition, I also want to provide you with the following
methods to
| > see
| > | > | if it can help:
| > | > |
| > | > | Method 1
| > | > | =============
| > | > | I would suggest you check the Windows 2000 Server. By default the
| > user
| > | > | created through SBS Admin console does not have permissions to
logon
| > to
| > | > | terminal server. Please check whether the domain user account on
the
| > | > server
| > | > | have a check in the box for "Allow logon to Terminal Server."
Check
| > the
| > | > box
| > | > | and test.
| > | > |
| > | > | Method 2
| > | > | =============
| > | > | Edit the Windows registry on the Windows 2000 terminal server so
that
| > it
| > | > | causes the Winlogon process to ignore the error.
| > | > |
| > | > | 1. Click Start, click Run, type regedit in the Open box, and then
| > click
| > | > OK.
| > | > | WARNING: If you use Registry Editor incorrectly, you may cause
| > serious
| > | > | problems that may require you to reinstall your operating system.
| > | > Microsoft
| > | > | cannot guarantee that you can solve problems that result from
using
| > | > | Registry Editor incorrectly. Use Registry Editor at your own
risk.
| > | > |
| > | > | 2. Locate the following registry subkey:
| > | > | HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal
Server
| > | > |
| > | > | 3. On the Edit menu, point to New, and then click DWORD Value.
| > | > | 4. In the New Value #1 box, type IgnoreRegUserConfigErrors, and
then
| > | > press
| > | > | ENTER.
| > | > | 5. Right-click IgnoreRegUserConfigErrors, and then click Modify.
| > | > | 6. In the Value data box, type 1 (one), click Decimal, and then
click
| > OK.
| > | > |
| > | > | For more information, please refer to the link below:
| > | > | 815266: "Your Interactive Logon Privilege Has Been Disabled"
Error
| > When
| > | > You
| > | > | Try to Log on to a Terminal Server
| > | > | http://support.microsoft.com/default.aspx?scid=kb;en-us;815266
| > | > |
| > | > | Hope that helps!
| > | > |
| > | > | Thanks & Regards,
| > | > |
| > | > | Ken Zhao
| > | > |
| > | > | Microsoft Online Support
| > | > | Microsoft Global Technical Support Center
| > | > |
| > | > | Get Secure! - www.microsoft.com/security
| > | > <http://www.microsoft.com/security>
| > | > | ====================================================
| > | > | When responding to posts, please "Reply to Group" via your
newsreader
| > so
| > | > | that others may learn and benefit from your issue.
| > | > | ====================================================
| > | > | This posting is provided "AS IS" with no warranties, and confers
no
| > | > rights.
| > | > |
| > | > |
| > | > |
| > | > |
| > | > | --------------------
| > | > | | Thread-Topic: Can't log on locally to XP after RDP session
| > | > | | thread-index: AcenfL20DwaxQErORZaDyIon+YJ5Vw==
| > | > | | X-WBNR-Posting-Host: 207.46.193.207
| > | > | | From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <[email protected]>
| > | > | | References:
<[email protected]>
| > | > | <[email protected]>
| > | > | | Subject: RE: Can't log on locally to XP after RDP session

TP · Jun 25, 2007

Hi,

To control the ability to logon to your Terminal Servers via Remote
Desktop, use membership of each server's local Remote Desktop Users
group, except for DCs where you would use a combination of the Domain
Local RDU group and RDP-Tcp listener object permissions (This
would permit to allow TS logon to some DCs and not other DCs).

To control the ability to logon to your XP Professional machines via
Remote Desktop, use membership of each machine's local Remote
Desktop Users group.

The "Deny this user permissions to log on to any Terminal Server"
check box in the user account properties is *not* used in most cases.
If you have checked this box in an attempt to control who can access
your TS servers then you need to go back and *uncheck* it for all
accounts.

If you only need to grant access to all/none of your TS member servers,
then the typical solution would be to create a global group called something
like "TS Users" and make it a member of all of the local server Remote
Desktop Users groups. That way you can easily grant/deny access
to your TS servers using Active Directory Users and Computers simply by
group membership.

For your XP machines you can do the same thing--create a "XP Remote
Desktop Users" global group and make it a member of all of the local
XP Remote Desktop Users groups.

-TP

Guest · Jun 25, 2007

Thanks very much! Appreciate the education in best practices. This method
does work much better, as I can identify my TS Users in the group at a
glance. I have been struggling with this issue for months.

Ken Zhao [MSFT] · Jun 26, 2007

Hello,

I am glad to hear that other peer's information has addressed your issue.
If you have any other questions, please feel free to post here.

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: Can't log on locally to XP after RDP session
| thread-index: Ace3e5SXUQzszhvURlaP8nu5C/1r7g==
| X-WBNR-Posting-Host: 207.46.19.168
| From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <[email protected]>
| References: <[email protected]>
<[email protected]>
| Subject: Re: Can't log on locally to XP after RDP session
| Date: Mon, 25 Jun 2007 15:53:00 -0700
| Lines: 117
| Message-ID: <[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| Newsgroups: microsoft.public.windowsxp.work_remotely
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windowsxp.work_remotely:1841
| NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
|
| Thanks very much! Appreciate the education in best practices. This
method
| does work much better, as I can identify my TS Users in the group at a
| glance. I have been struggling with this issue for months.
|
| "TP" wrote:
|
| > Hi,
| >
| > To control the ability to logon to your Terminal Servers via Remote
| > Desktop, use membership of each server's local Remote Desktop Users
| > group, except for DCs where you would use a combination of the Domain
| > Local RDU group and RDP-Tcp listener object permissions (This
| > would permit to allow TS logon to some DCs and not other DCs).
| >
| > To control the ability to logon to your XP Professional machines via
| > Remote Desktop, use membership of each machine's local Remote
| > Desktop Users group.
| >
| > The "Deny this user permissions to log on to any Terminal Server"
| > check box in the user account properties is *not* used in most cases.
| > If you have checked this box in an attempt to control who can access
| > your TS servers then you need to go back and *uncheck* it for all
| > accounts.
| >
| > If you only need to grant access to all/none of your TS member servers,
| > then the typical solution would be to create a global group called
something
| > like "TS Users" and make it a member of all of the local server Remote
| > Desktop Users groups. That way you can easily grant/deny access
| > to your TS servers using Active Directory Users and Computers simply by
| > group membership.
| >
| > For your XP machines you can do the same thing--create a "XP Remote
| > Desktop Users" global group and make it a member of all of the local
| > XP Remote Desktop Users groups.
| >
| > -TP
| >
| > Glen Martin wrote:
| > > Sorry about the new thread - see background info below.
| > >
| > > I still don't see a fix for this issue. Another bit of information -
| > > I am able to log on at the console as a domain admin when the problem
| > > appears. If I then log off, the non-admin user is able to log on
| > > without encountering the error.
| > >
| > > The problem we have is that we do not want to enable Terminal
| > > Services logon in AD, as we are using it to restrict non-TS users
| > > from logging on to our TS. So that workaround does not work for us.
| > >
| > > Another question: Is there any way to apply the TS restrictions in
| > > AD to just the Terminal Server, as opposed to having it affect
| > > everyone who uses RDP to come into an XP host? We use TS and XP RDP
| > > hosts for different purposes, and we would like to restrict who logs
| > > onto the TS. Right now, when we disable a user's TS logon privilege
| > > in AD, it also prevents them from logging onto an XP RDP host.
| > >
| > > Glen
| > >
| > > Hello,
| > >
| > > It seems you are replying another post this newsgroup. If you have any
| > > questions, please feel free to submit your question.
| > >
| > > Thanks & Regards,
| > >
| > > Ken Zhao
| > >
| > > Microsoft Online Support
| > > Microsoft Global Technical Support Center
| > >
| > >
| > > I have seen the same "BUG". Here's the scenario:
| > >
| > > User A is logged into her XP Pro SP2 Dell Desktop. She requests
| > > software to be installed and I use RDC to logon to her computer
| > > remotely using the administrator account to complete the request. I
| > > log off and then she tries to logon locally JUST AS SHE WAS PRIOR TO
| > > MY REMOTE LOGIN, and she gets the "Your logon privilege has been
| > > disabled" error message. This error message is for TERMINAL SERVICES
| > > LOGONS but
| > > NOT FOR LOCAL LOGONS. So...why are we getting this message?
| > >
| > > THe work-around above "allow logon to terminal server" in the AD Users
| > > and Computers app masks the bug. It appears that once a remote login
| > > takes place using RDC that the subsequent LOCAL logins use the REMOTE
| > > DESKTOP CONNECTION login. You can reboot the computer and it will
| > > then allow a local login without changing the "allow logon to terminal
| > > server" setting in AD Users and Computers. Has anyone found a "fix"
| > > for this?
| > >
| > > David
| > >
| > >
| > > Check the properties of the AD acct that cannot logon locally to the
| > > machine. On the Terminal Services Profile tab, enable the "Allow logon
| > > to terminal server" option. It appears that the computer gets "stuck"
| > > in terminal services mode after a Remote Desktop user logs off. When a
| > > domain user w/o the rights to logon via terminal services subsequently
| > > tries to logon locally, they are denied access.
| > >
| > >
| > > Two XP Pro machines with all updates. User locally logged onto
| > > machine A using his AD logon. He logs off. From machine B I use
| > > Remote Desktops to log on to machine A as the domain administrator.
| > > I log off, which causes a disconnect. The user trys to locally log
| > > onto machine A and gets "Your interactive logon privilege has been
| > > disabled. Please contact your system administrator.". Local user
| > > does a restart and can log on OK. This is repeatable and happens
| > > with multiple instances of Machine A. If, instead of doing a log
| > > off, I do a restart when I am finished with the remote access, the
| > > user can log on locally. But either way, once I have logged on
| > > through Remote Desktops, the machine must be rebooted (restarted) to
| > > allow a local user to log on.
| > >
| > > Is this a bug or design? If a bug, what to do to fix it? If
| > > design.......?
| >
|

Robin Walker [MVP] · Jun 30, 2007

Glen Martin said:
"Ken Zhao [MSFT]" said:

Is this your exact error message you received "Your Interactive Logon
Privilege Has Been Disabled"?

Click to expand...

Yes, this is the exact error message.

See http://support.microsoft.com/kb/938375 hotfix
Error message when you try to log on to the console session of a computer
that is running Windows XP with SP2 and that is in a domain: "Your
interactive logon privilege has been disabled"

Can't log on locally to XP after RDP session

Guest

Ken Zhao [MSFT]

Guest

Ken Zhao [MSFT]

Ken Zhao [MSFT]

Guest

Ken Zhao [MSFT]

Ken Zhao [MSFT]

Guest

Ken Zhao [MSFT]

Ken Zhao [MSFT]

Guest

TP

Guest

Ken Zhao [MSFT]

Robin Walker [MVP]