Error "the local policy of this system does not permit you to logon interactively"

[Ronchese]

Hi, guys!

I have searched in google to get solutions to error "the local policy of
this system does not permit you to logon interactively", but I have not
found any fix to it.

I have the following situation (would be very simple but was not):

- I have a Windows 2000 Profession (SP4);
- was created a simple user in the domain computer;
- I have tryied do login in my Windows 2000 Professional (SP4)
- the error above appears....!

I really need log on with poor user to test my applications without admin
rights.



In local policy on my Win2k Pro is configured:
LOGON LOCALLY
the new created user and respectively group (the default) was configured
DENY LOGON LOCALLY
there are not any users/groups related with the new created user

Obs.: I already have used the secedit /refreshpolicy (...) to update the
policy database.



Tks in advance!

[]'s
Cesar

 

[Subrahmanya Bhandarkar [MSFT]]

Check this link
http://support.microsoft.com/default.aspx?scid=kb;en-us;826903&Product=win20
00

"The local policy of this system does not permit you to logon
interactively" error message when you log on to your Windows 2000-based
computer
View products that this article applies to.
SYMPTOMS
On a Microsoft Windows 2000-based computer, when you try to log on locally
or try to log on to the domain, you receive the following error message:

The local policy of this system does not permit you to logon interactively.
If you try to log on to the domain as a domain administrator, you receive
the following error message:

The system cannot log you on to this domain because the system's machine
account in its primary domain is missing or the password on that account is
incorrect.
If you use the Netdom.exe utility to reset the security channel to the
domain controller, you receive the following error message:

The trust relationship between this workstation and the primary domain
failed.
If you use the Nltest.exe utility to test the security channel to the
domain controller, you receive the following error message:

Access denied.
RESOLUTION
To resolve this issue, follow these steps:
Restart the Windows 2000-based computer, and then run the Recovery Console.
From the Recovery Console, type copy c:\winnt\repair\security
c:\winnt\system32\config\security at the command prompt, and then press
ENTER.
At the command prompt, type exit, and then press ENTER to exit the Recovery
Console and to restart the computer.
Log on locally to the computer.
Remove the computer from the domain, and then restart the computer.

To do this, follow these steps:
On your desktop, right-click My Computer, and then click Properties.
Click the Network Identification tab, and then click Properties.
Under Member of, click Workgroup. Type the name of a workgroup, and then
click OK two times.
Restart your computer.
In the Active Directory Users and Computers snap-in, delete the computer
account. Wait for the deletion to replicate to all the domain controllers.
Rejoin the computer to the domain, and then restart the computer.

To do this, follow these steps:
On your desktop, right-click My Computer, and then click Properties.
On the Network Identification tab, click Properties.
Under Member of, click Domain. Type the name of the domain that you want to
join, and then click OK. You are prompted to provide a user name and
password to join the computer to the domain.
Type the name and the password of an account that has permissions to join
the computer to the domain, and then click OK two times.
Restart your computer.
MORE INFORMATION
For additional information about how to install and use the Recovery
Console, click the following article number to view the article in the
Microsoft Knowledge Base:
318752 HOW TO: Install and Use the Recovery Console in Windows 2000







Subbu
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Subrahmanya Bhandarkar [MSFT]]

Sorry may be my last posting will not solve your problem.

You told that you are using user account which is created on domain, Can
you use that account to login to other system. This is to check problem for
that account or specific to computer.

What is the Group plolicy applied at server or OU level



Subbu
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Subrahmanya Bhandarkar [MSFT]]

Check this link

http://support.microsoft.com/default.aspx?scid=kb;en-us;285793&Product=win20
00


Subbu
This posting is provided "AS IS" with no warranties, and confers no rights.