User can't access the server

[Mike]

I have a W2K domain with XP clients. A user can log on but cannot
access the server that contains their data (it is also the DC). When
trying to map to the server or to access the server through network
connections I receive the error message:

You might not have permission to use this network resource. Contact
the administrator of this server to find out if you have access
permissions.
Logon failure: user account restriction. Possible reasons are blank
passwords not allowed, logon hour restrictions, or a policy
restriction has been enforced.

We are not using blank passwords or logon restrictions. We use group
policy but I don't know of any settings that would affect this,
particularly considering this happened over the weekend without anyone
making any changes to our policy. We worked fine last week.
Administrators don't have any problems connecting.

 

[Steven L Umbach]

In Domain Controller Security Policy make sure that auditing of logon events
and privilege use is enabled for failure - at least temporarily. Then check
the security log via Event Viewer to see if any failure events are recorded
at the time that the user is denied access and such events may provide a
clue. It sounds like perhaps regular users do not have the access this
computer from the network user right for domain controllers which by default
they should. Check that in Domain Controller Security Policy and a default
setting would include everyone and authenticated users. Keep in mind that
deny access this computer from the network user right will override the
allow user right if the user trying to logon is a member of a group that has
deny access this computer from the network user right.

Steve