local policy of this system error

[jb]

I am getting the error "local policy of this system does not allow you to
log on interactively" The user is only a domain user and we are trying to
log onto a domain controller. How can I enable this user to log into the dc
without giving it admin rights?

 

[Steven L Umbach]

By default regular users are not allowed to logon to a domain controller. If you
really want to let him, go to Domain Controller Security Policy/security
settings/local policies/user rights and add his account or make a group for him and
add that to "log on locally" user right. --- Steve

 

[jb]

We set that through group policy and verified policy processing. Still
working. Any other ideas?

 

[Steven L Umbach]

Did you do it at the Domain Controller Security level? It will not work in local
policy or domain policy since domain controller policy will override it. If you look
at "effective" settings in Local Security Policy on the domain controller, that will
tell you if the policy has propagated or not. Gpresult will show what policies are
applying to a computer and last time the policy was applied. -- Steve