the local policy of this system does not allow you to login interactively

[farh]

I restored my policies yesterday on a windows 2000 server
and today some users were not able to log onto the
domain. they were getting and error
"the local policy of this system does not allow you to
login interactively". I had to rejoin them to the domain
and create their user account on their windows xp machine
with administrative rights, then they could log on. What
is going on here?

 

[Chriss3]

Computer Configuration\Windows Settings\Security Settings\Local
Policies\User Rights Assignment\Log on locally

By default, Administrators, Backup Operators, Power Users, Users, and Guest
should be available to logon locally.

 

[farh]

WHere is this "computer configuration\windows
settings"etc. How do I get to it?

 

[Chriss3]

You can type the follow at the particular workstation

Click Start -> Run !type! gpedit.msc !enter!

 

[ptwilliams]

I've seen this error/ issue on XP boxes after using a machine via remote
desktop, and then trying to log on locally. Rebooting fixed this.

I've also noticed this: a service that runs using a user account as a
security context, e.g. smsservice is a member of domainName\administrators
but the service cannot start due to the account not having log on locally
rights. The reason - networking/ routing problems stopping/ blocking
authentication with a DC.

Something to think about...

Paul.

_________________________________________

 

[Chriss3]

You can logon in safe mode in order to edit the policy.