Win2000 Terminal Server Logons not permitted

[Fran W]

We have a new Win2000 domain with 2 servers. One is the
DNS server running SQL server and the other is a terminal
server running Citrix Metaframe. When we try to logon
users we get the following message "The local policy of
this system does not permit you to logon interactively."
All users can logon to the first server but not the
terminal server.

We have changed permissions in Domain Security Policy,
Local Security Policy, and Domain Controller Security
Policy and the users are able to logon for a few minutes.
But then get the same message as above. We changed from
mixed mode to native mode and again worked immediately but
again we received the same error after waiting awhile. The
changes do not remain in Effective policy.

Has anyone out there had this problem? Does anyone have a
suggestion? We would really appreciate your responses.
Thanks

 

[Chriss3]

Set this option to Domain Users...
Log on locally
Computer Configuration\Windows Settings\Security Settings\Local
Policies\User Rights Assignment

To allow a user to log on locally to a domain controller, you have to grant
this right by means of the Default Domain Controller GPO


--
Regards,


Christoffer Andersson
No email replies please - reply in the newsgroup
If the information was help full, you can let me know at:
http://www.itsystem.se/employers.asp?ID=1

 

[FranW]

We have done that but it doesnt remain in effective rights.

 

[Chriss3]

Is the terminal server also a Domain Controller?

--
Regards,

Christoffer Andersson
No email replies please - reply in the newsgroup
If the information was help full, you can let me know at:
http://www.itsystem.se/employers.asp?ID=1

 

[Alan Sterling [MSFT]]

FranW

We need to find out if the settings you made are changed when the users
cannot logon. If they are, one DC may be overwriting the policy changes
made on the other.


--
Alan Sterling---MCSE
Windows 2000 Directory Services
English - This posting is provided "AS IS" with no warranties, and confers
no rights. OR if you wish to include a script sample in your post please add
"Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm"

 

[Guest]

FranW

Did you grant the users acess thru the permission tab of the "Terminal Services Configuration"

Please refer to http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q247989& and http://support.microsoft.com/default.aspx?scid=kb;EN-US;224395 . It has a description of the problem you are facing

English - This posting is provided "AS IS" with no warranties, and confer
no rights. OR if you wish to include a script sample in your post please ad
"Use of included script samples are subject to the terms specified a
http://www.microsoft.com/info/cpyright.htm