log on locally problem

[Guest]

Hi, I have a problem with a Windows 2000 Prof computer COMPUTER NAME: MYPC.

If my Windows 2000 Prof is setting on the my domain MYDOMAIN then when i try
to log on locally withon pc with any of followinf Accounts:

Username: MYPC\Administrator
Password: (correct password of Administrator PC)
Log on to: MYPC

or

Username: Administrator
Password: (correct password of Administrator domain)
Log on to: MYDOMAIN

or

any other account of MYDOMAIN

I have an error message appears:
“The local policy of this system does not permit you to logon interactivelyâ€.


then i Replace the local security database
If the "Log on locally" or "Deny log on locally" policy is configured in
the Local Group Policy, refer to the steps below to replace the local
security database:

1. Connect to the problem Windows 2000-based computer's C$ share from
another network computer using the administrator account.
2. Open the %Systemroot%\Security\Database folder.
3. Rename the Secedit.sdb file.
4. Copy Secedit.sdb file from an operational Windows 2000
Professional-based computer.
NOTE: Another Secedit.sdb file from a similar Windows 2000-based, Windows
2000 Professional-based, or Windows 2000 Server-based computer, is
required. This file can be copied from another computer which has a similar
version.
5. Copy the new Secedit.sdb file to the %Systemroot%\Security\Database.
6. Restart the computer and test the issue again.

and i log on correctly with the following account:

Username: MYPC\Administrator
Password: (correct password of Administrator PC)
Log on to: MYPC


Now if I re-insert MYPC in MYDOMAIN I have the same problem above.
I have alaways an error message appears:
“The local policy of this system does not permit you to logon interactivelyâ€.

I Ask you:
this problem is due to that is not configured properly the policy of
MYDOMAIN or is not configured properly the policy of MYPC?

can it help me?

Thaks

 

[Guest]

Hi,

It sounds like you have a Group Policy Setting on the Domain that is doing
this. Local Security Policy is always overridden by Domain Group Policy.
Maybe a Group Policy setting was set on the Default Domain OU or on the OU
where the computer resides on the Domain that is doing this.

Go to the Default Domain policies or any policies that apply to the
computer. Look under Comp Config-Windows Sett-Security Settings-Local
Policies-Users Rights Assignment. Look under "Logon locally" and make sure it
is "Not Defined" or set to the correct users.

If you are running Windows 2003 server, download the Group Policy Management
Console as it allows you to see what settings are affecting your computers.

Cheers,
Lara