Not able to Log On to domain, error message:-

[Barry McConomy]

Not able to Log On to domain, error message:-

"The local policy of this system does not allow you to log on interactively"

I checked a workstation's Local Security Settings and the Log On locally
shows
"DomainName"\Backoffice Remote Operators and Administrator

I tried to edit to Domain Users, however, it is dimmed and will not allow me
the edit, I was log on as an administrator.

History:-

Prior to this problem I did carry out the procedure on the Domain Controller
to "Grant Users Access to Terminal Services", I have back tracked the
changes and think all is as was.

Can any body help with this problem.

PS: I have added users temporally to the Domain Admin group which is
allowing access, whilst I sort the problem.

Regards
Barry

 

[Steven L Umbach]

The dimmed out part means that policy is being inherited from a higher level
such as domain or Organizational Unit depending on where that computer
resides in Active Directory. Find the GPO for that level and add users to
that user right. You can use the gpresult tool to see where machine policy
is being applied from for a domain computer by running it on that computer
as an administrator. See link below for details. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;321709

 

[Barry McConomy]

Steve

Thanks for the advice.

Barry

The dimmed out part means that policy is being inherited from a higher level
such as domain or Organizational Unit depending on where that computer
resides in Active Directory. Find the GPO for that level and add users to
that user right. You can use the gpresult tool to see where machine policy
is being applied from for a domain computer by running it on that computer
as an administrator. See link below for details. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;321709

allow