The Server machine does not allow the login of active directory user

[hon123456]

Dear all,

I got a server which is runing Active directory and domain ABC.
Now I got some users that can login from their XP workstation to the
domain. But when
I use these users account to login in the actual(local) server
machine. ( I mean login to the actual machine of the server). It
complains " The local policy of this system does not permit you to
lgonon interactively" . What happened? How can I Change the policy to
let the user to login the actual machine of the server.?

Please help. Thanks.

 

[Jerold Schulman]

Dear all,

I got a server which is runing Active directory and domain ABC.
Now I got some users that can login from their XP workstation to the
domain. But when
I use these users account to login in the actual(local) server
machine. ( I mean login to the actual machine of the server). It
complains " The local policy of this system does not permit you to
lgonon interactively" . What happened? How can I Change the policy to
let the user to login the actual machine of the server.?

Please help. Thanks.

By default, a DC does not grant local logon rights to normal users.
If you want them to logon to the server, use the Default Domain Controller policy
to grant the right.
Computer Configuration / Windows Settings / Security Settings / Local Policies / User Rights Assignment

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com