Error "the local policy of this system does not permit..

[Guest]

Hi, i'm having problem with the local user account.

We're running Windows 2000 Domain Server with Active Directory , all users
logon to their PCs using their NT Login ID which authenticates through our
Domain but however i still need to create a "local" user account for each PC
with "Power user" rights.

Domain users & local Administrator can logon without any problems but only
when i create a local account named "primary" with power users rights it
denies the logon with an error message "The local policy of this system does
not permit you to logon interactively"

It works fine if i give "Administrator" rights for this local account but i
have to restrict this user account from having full access to the system.

Is there anything from the Domain "Local Security Settings" that's denying
it or... how can i permit this local account to logon locally

Please help/advise

Aznan
The International School of Penang (Uplands)

 

[Herb Martin]

Hi, i'm having problem with the local user account.

We're running Windows 2000 Domain Server with Active Directory , all users
logon to their PCs using their NT Login ID which authenticates through our
Domain but however i still need to create a "local" user account for each
PC
with "Power user" rights.

Why? It is generally a mistake to create any local
users except for perhaps housekeeping or some
services.

Domain users & local Administrator can logon without any problems but only
when i create a local account named "primary" with power users rights it
denies the logon with an error message "The local policy of this system
does
not permit you to logon interactively"

Power Users is a GROUP not a "right".

You created a User named Primary on a workstation but that
user cannot logon when pressing Ctrl-Alt-Delete and using
the name User with the "domain" set to the "Computer Name"?

Is this precisely correct?

It works fine if i give "Administrator" rights for this local account but
i
have to restrict this user account from having full access to the system.

Is there anything from the Domain "Local Security Settings" that's denying
it or... how can i permit this local account to logon locally

This isn't a Server (OS) machine is it?

 

[Guest]

Hi, sorry... i think i'm not good in explaining and it seems like you're
confused with my question.

I need to create a local user name for a backup reason.

Domain users are fine, only local users with Power User right can't logon
locally (which ends up with an error message "the local policy of this system
does not permit...")

Yes , it's not a server (OS) i'm using Windows XP with SP2.


--
The International School of Penang (Uplands)

Hi, i'm having problem with the local user account.

We're running Windows 2000 Domain Server with Active Directory , all users
logon to their PCs using their NT Login ID which authenticates through our
Domain but however i still need to create a "local" user account for each
PC
with "Power user" rights.

Why? It is generally a mistake to create any local
users except for perhaps housekeeping or some
services.

Domain users & local Administrator can logon without any problems but only
when i create a local account named "primary" with power users rights it
denies the logon with an error message "The local policy of this system
does
not permit you to logon interactively"

Power Users is a GROUP not a "right".

You created a User named Primary on a workstation but that
user cannot logon when pressing Ctrl-Alt-Delete and using
the name User with the "domain" set to the "Computer Name"?

Is this precisely correct?

It works fine if i give "Administrator" rights for this local account but
i
have to restrict this user account from having full access to the system.

Is there anything from the Domain "Local Security Settings" that's denying
it or... how can i permit this local account to logon locally

This isn't a Server (OS) machine is it?

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

Please help/advise

Aznan
The International School of Penang (Uplands)

 

[Herb Martin]

Hi, sorry... i think i'm not good in explaining and it seems like you're
confused with my question.

No, I got most of it, but you neglected to say this
was a SERVER OS.

I need to create a local user name for a backup reason.

Domain users are fine, only local users with Power User right can't logon
locally (which ends up with an error message "the local policy of this
system
does not permit...")

Yes , it's not a server (OS) i'm using Windows XP with SP2.

Give the user the right to logon. Normal users don't
typically have the right to logon locally at servers.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

--
The International School of Penang (Uplands)

Hi, i'm having problem with the local user account.

We're running Windows 2000 Domain Server with Active Directory , all
users
logon to their PCs using their NT Login ID which authenticates through
our
Domain but however i still need to create a "local" user account for
each
PC
with "Power user" rights.

Why? It is generally a mistake to create any local
users except for perhaps housekeeping or some
services.

Domain users & local Administrator can logon without any problems but
only
when i create a local account named "primary" with power users rights
it
denies the logon with an error message "The local policy of this system
does
not permit you to logon interactively"

Power Users is a GROUP not a "right".

You created a User named Primary on a workstation but that
user cannot logon when pressing Ctrl-Alt-Delete and using
the name User with the "domain" set to the "Computer Name"?

Is this precisely correct?

It works fine if i give "Administrator" rights for this local account
but
i
have to restrict this user account from having full access to the
system.

Is there anything from the Domain "Local Security Settings" that's
denying
it or... how can i permit this local account to logon locally

This isn't a Server (OS) machine is it?

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

Please help/advise

Aznan
The International School of Penang (Uplands)