Logon interactively probmel after domain install

[Abraham]

Hi
I just added my pc to the domain I have set up. But local users cannot
login now, only admin can. I could not find "Allow logon locally" in
"Local Security Settings\Users Rights Assignments" !! I think it must
be there, but it isn't. Please help.

Regards,
Abraham

 

[Guest]

There should be a dropdown on the logon-screen to allow selection of the
local computer or domain.

A policy might've disabled this, though. That's the danger of joining a
domain, it's a bit like getting a Goa'uld in the back of the neck. ;-)

 

[Steven L Umbach]

Look for the user right "logon locally" and keep in mind that deny logon
locally supersedes logon locally so check that user right also. You can run
rsop.msc to see if Group Policy at the domain level is enforcing any user
rights.

Steve

 

[Abraham]

There is no "logon locally" in "Local security settings" of my PC,
which has XP. Do you mean I have to set the right in the domain server
PC?

My question is, why do I have this problem when I want to logon to this
computer, not to the domain? All I have changed is that, I added this
PC to domain. why I cannot login as before?

Regards,
Mehdi

 

[Harry Johnston]

There is no "logon locally" in "Local security settings" of my PC,
which has XP.

Are you sure? Open "Local Security Settings", open "Security Settings", open
"Local Policies", open "User Rights Assignment" and look for the policy "Log on
locally". Even if this is assigned by group policy it should still appear,
although you won't be able to change it. Also check "Deny logon locally".

Are you running Windows XP Home or Professional? I don't have a copy of Home
edition handy to check this on.

My question is, why do I have this problem when I want to logon to this
computer, not to the domain? All I have changed is that, I added this
PC to domain. why I cannot login as before?

Adding a machine to a domain is a BIG change. It can affect all sorts of
things. In this case, it sounds as if you're either forgetting to select the
right domain in the logon dialog box (you need to explicitly choose to log into
the local computer instead of the domain) or a group policy setting from the
domain is blocking logon.

Harry.

 

[Steven L Umbach]

I agree with Harry - the user right should be available unless you have
corruption of secedit.sdb, etc. If you can see it but can not change it then
that means that the user right is being enforced by a domain/OU level Group
Policy which should show using rsop.msc.

Steve