Windows Forum

Ask something
Discussion Locked

local policy not allow logon interactive

0 helpful
4 replies

by reference 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am getting the error "the local policy of this machine does not permit you to logon interactively."
I have two 2k domain controllers, and the machine I'm getting this error on is a 2k pro in the domain.
The problem machine is connected via the lan, and just trying to logon to the domain. It appears to have started after creating new OU's on the domain controller's and adjusting the group policis associated with the OU for remote Terminal Services users. The problem machine (or user, administrator logs in fine to the domain) is not part of the new OU's in any way. If the machine is setup to logon to the domain, I get this error trying to logon as the problem user to the domain, or any user to the local machine. If the machine is setup to login to a workgroup, all local users logon fine locally. I have checked the group policy on the local machine, and all looks well. Any thoughts...it's killing me!?

4 replies

by reference

I have deleted the user and the computer from the domain, and recreated the user, then re-attached to the domain.
Any chance SP4 would fix this? On the DC's and/or the 2k pro machine?

by beermonster

Hi,
Somewhere along the line there is a group policy enforcing this restriction. The first place I would look is in the default domain policy, right at the root of your AD structure.

by reference

Well, now I feel like an idiot! I thought I'd checked all that, but sure enough, the Default OU was incorrectly configured for "logon locally" and "access this computer from the network". Reconfiguring these settings fixed the problem! So obvious! Thanks!!

This discussion is closed to new replies.