Local Policy Does Not Permit Login Interactively

[Tim Anderson]

I am running in a single server environment. We are
running Windows 2000 Server with the latest service pack
and patches.

When I add a new user and the user tries to login at a
client workstation they get a message the states "The
local policy of this system does not permit you to login
interactively." If I make a user a member of the
administrator group they can login in fine.

I can't leave them in the administrators group and I am
trying to resolve this. I have searched tech net and the
articles I have found point to it being a group policy
setting. I have look through our group policy and can't
find where this would be set. If it is a group policy
setting can someone them me where I can find this (which
folder\sub folder). If is not this any other suggestions
would be appreciated. I found one tech note about using
ntrights and another about using the policy editor but I
am not sure if these are valid in my case.

Thanks

 

[Ondrej Sevecek]

on the server navigate:

Control Panel -> Administrative Tools -> Local Security Policy (or Default
Domain Controller Policy) -> Local Policies -> User Rights Assignment

there are two relevant entries to be modified:

Allow logon locally
Deny logon locally

Then, to let changes propagate immediatelly, run this command:

secedit /refreshpolicy machine_policy /enforce

and you are where you wanted.

Nice day Ondra.