What could cause this 'administrator' to experience "unable to logon locally" ?

[Marlon Brown]

MyDomain\MyUser is a member of the local administrator group on respective
(3) Win2000 ServerSP4 that work as load balance for a Citrix solution.
MyUser attempts to logon to any of those servers via TS and get "you cannot
logon interactively". MyUser is a member of administrator groups on that
server. I go to to the local GPO on that server confirm that the
administrators (local and effective policy)have the rights to "logon locally
on that server". TS allows administrators to connect via TS just fine. I
confirm that there is no entry in the policy "deny logon locally".

I copy MyUser account and CopyofMyUser is able to logon to those servers via
TS just fine.

I reboot the server and problem is not solved. MyDomain\MyUser is still
unable to logon.

What could be causing this ? Please note it is happening in 3 servers.
MyUser is able to logon everywhere else in our domain.

 

[Chriss3 [MVP]]

Ensure the users or a group the user is member of is in Allow log on through
Terminal Services within the Security Policy for the particular Terminal
Server, as well en sure the user or a group the user is member of dose NOT
belong to Deny logon on through Terminal Services. The same applies for
Allow logon locally, and Deny Logon Locally.

--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services

No email replies please - reply in the newsgroup

 

[Marlon Brown]

All your suggestions have been verified, and a copy of the User1 logs on
just fine.