can't logon locally

[Peter]

Hi,

I have a question about the using the Domain Security Policy and Local
Security Policy. There is one account called "mail-operator" that I want to
grant permission to logon to the server computer itself. This account is
part of the domain users group.

I have already granted "mail-operator" the right to logon locally in the
"Domain Controller Security Policy" and I have granted it under "Local
Security" policies.

However, I when I try to logon it says "The local policy of this system
does not allow you to logon interactively".

Am I missing something?

Peter

 

[Chriss3]

Is there anything set at deny logon locally?

 

[Buz [MSFT]]

Also check the Access this Computer from the Network policy in Security
Options.

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

 

[Peter]

Thanks for your replies.

But there is nothing set on the "Deny Logon locally".

Actually, I have two servers on my network. I have a Windows 2000 SBS
server and an ordinary Windows 2000 server. They are both acting as domain
controllers in the domain. They are able to replicate their active
directory accounts with each other.

I am not sure if this may have something to do with the problem. When I try
to grant the right to logon on to the server machine to an ordinary user
account in my home network which uses a single Windows 2000 SBS server, it
works.

Thanks.

Peter