The local policy of this system does not permit you to logon interactively

B

Bill

Hi All

I've got a XP Pro machine on a 2000 Domain. When I
attempt to logon to remote desktop connection I'm able to
logon to the local machine account just fine. When I
attempt to logon to the domain account, it fails with the
error "The local policy of this system does not permit
you to logon interactively". I've checked the local
policies and domain security policies and both seem to be
correct. The one thing I did notice was the local policy
on the XP box will not allow me to add domain users, only
local users. However, the remote desktop connection
properties shows domain/user as having access to the
remote connection. I've been trying to resolve this for
weeks. Any thoughts would be appreciated.

Bill
On Ramp
bill(no_spam)@onrampcomputers.com
 
J

Jeffrey Randow (MVP)

Have you check the user rights assignment? The Remote Desktop Users
local group (or the security group containing the people you want to
enable access) needs to be specified under "Allow logon through
Terminal Services".

See
http://www.microsoft.com/technet/tr.../windowsserver2003/proddocs/entserver/617.asp

**** PLEASE INSTALL THE MS04-007 SECURITY PATCH - ASN.1 Vulnerability
Could Allow Code Execution (828028) ***
http://www.microsoft.com/technet/treeview/?url=/technet/security/bulletin/MS04-007.asp


Jeffrey Randow (Windows Net. & Smart Display MVP)
(e-mail address removed)

Please post all responses to the newsgroups for the benefit
of all USENET users. Messages sent via email may or may not
be answered depending on time availability....

Remote Networking Technology Support Site -
http://www.remotenetworktechnology.com
Windows XP Expert Zone - http://www.microsoft.com/windowsxp/expertzone
 
B

Bill

Thanks for the suggestion. I performed these steps and
still found myself unable to logon to remote desktop when
using the domain account. Could it be that there's junk
in the registry left from when 2000 Pro was on this
machine?

I'm really stuck...
 
J

Jeffrey Randow (MVP)

There could be... There are a lot of settings that are not copied
over when you upgrade from Win2K to WinXP...

Have you tried adding a domain group to the local remote desktop users
group?

**** PLEASE INSTALL THE MS04-007 SECURITY PATCH - ASN.1 Vulnerability
Could Allow Code Execution (828028) ***
http://www.microsoft.com/technet/treeview/?url=/technet/security/bulletin/MS04-007.asp


Jeffrey Randow (Windows Net. & Smart Display MVP)
(e-mail address removed)

Please post all responses to the newsgroups for the benefit
of all USENET users. Messages sent via email may or may not
be answered depending on time availability....

Remote Networking Technology Support Site -
http://www.remotenetworktechnology.com
Windows XP Expert Zone - http://www.microsoft.com/windowsxp/expertzone
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top