The Local Policy of the system doesn't permit you to log on interactively

[ASMAN]

I am getting the error message when I log-on to Windows XP
Pro Machine which is register in Windows NT 4.0 domain.

I connect to XP machine throug Remote Desktop, at login
prompt I put the user name of the user who is register
user on windows NT 4.0 domain and in the log on to box
switch it to Domain controller name isnted of Local
machine name.

I get the following error message:
"The Local Policy of the system doesn't permit you to log
on interactively"

When I logon to Local Machine as Administrator of the
machine and in log on to box choose local machine name i
sucessfuly logon.

When I logon to Machine as Domain Administrator and in
logon to box choose Domain controller name, I sucessfully
loged on.

Why would it not let the domain user log on to windows NT
domain if logging via remote desktop desktop? It does let
domain user login on to NT domain if user is sitting in
front of pc and logon.

I will appreciate any help...
ASMAN

 

[Bill Sanderson]

Are there any Windows 2000 servers in the domain?

There's another thread here with a similar issue. That user was able to
determine that either a third-party tool, or administrative tools running on
a Windows 2000 server, enabled him to set the user properties for the domain
user so that Terminal Services usage was enabled.

 

[ASMAN]

Yes, The machine I am using remote desktop client is
Windows 2000 server machine. It is not register in windows
NT domain but WorkGroup.

-----Original Message-----
Are there any Windows 2000 servers in the domain?

There's another thread here with a similar issue. That user was able to
determine that either a third-party tool, or

administrative tools running on

 

[ASMAN]

This post you are talkin about.
Subject: Remote Desktop inoperarble after in-place
upgrade
From: "Rupert Knight"
<[email protected]> Sent: 8/31/2004
9:26:29 AM

Yes, I have Windows 2000 server machine which I am using
remote desktop client to connect to Windows XP pro machine
service pack 2.

The Google post don't have the similar problem that I have.

 

[Bill Sanderson]

It's been a long time since I've run an NT4 domain.

Do you have a Windows-2000 based management tool which can see the domain
user list?

You need to check "allow access to terminal server" in the terminal services
profile of the domain user.

If I sound vague here, it's because I can't recall just which tool you'd
use--I don't recall whether you run the NT4 admin tools under Windows 2000,
or whether you use the Windows 2000 remote admin tools to look at the older
structures.

 

[Bill Sanderson]

Nope--that's not the one--let me find it.
OK:

Subject "Your interactive logon privilege has been disabled"
8/23/2004 9:39 AM, Tim David