The local policy of this system does not permit you to logon interactively.

[Eric]

When attempting authentication on a remote desktop connection I get the
following error:

"The local policy of this system does not permit you to logon interactively.
"

To correct the problem I need to add my AD user account to the "Allow logon
through Terminal Services" local policy. Although acceptable for a one time
fix I have nearly 3000 workstations migrated to XP that need to be fixed.
I am pushing us to get rid of PC Anywhere and move to native Terminal Server
solutions on Windows XP. This is going to cause me problems. Being a
member of the Remote Desktop Users group does not solve this problem even
though this group is defined in the policy.

Any help is greatly appreciated!

Thanks.

 

[Jeffrey Randow (MVP)]

Do this via Domain Group Policy... I would give you chapter and
verse, but I am not at a domain right now.. In general, you give a
domain group the User Right to allow the connection and push this out
through a domain GP.

Jeffrey Randow (Windows MVP - Networking & Smart Display)
(e-mail address removed)

Please post all responses to the newsgroups for the benefit
of all USENET users. Messages sent via email may or may not
be answered depending on time availability....

Remote Networking Technology Wiki -
http://www.remotenetworktechnology.com
Smart Display Support - http://www.smartdisplays.net
Windows XP Expert Zone - http://www.microsoft.com/windowsxp/expertzone