General discussion

Locked

Interactive Logon

By ins413 ·
I have a workstation that is giving me an error something to the effect of : cannot logon interactively. Now, that is not the exact error but I'm sure that if you have run into it, you know exactly what it is. It is a pro machine that was working fine and I strongly suspect the user was fiddling with security on it. Any way to get around this without having to reinstall OS?

This conversation is currently closed to new comments.

9 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Interactive Logon

by RCC In reply to Interactive Logon

Admin should be able to login and modify the policy. If not and you have a network, try using another Pro machine, open My Computer/Manage, but go Action - Connect to another computer and point to the troubled machine. There is a good chance you may be able to modify the policies remotely.
If not, you should be able to remove some of these using the Recovery console.
What sort of network are you using? If you have a 2000 DC, domain and site policies should be able to overwrite the local machine one.
I hope this helps.
Regards,
Radu

Collapse -

Interactive Logon

by ins413 In reply to Interactive Logon

Poster rated this answer

Collapse -

Interactive Logon

by QB In reply to Interactive Logon

The user attempting to log on does not have the "logon locally " permission available under Security Settings\Local Policies\User Rights Assignment\Log On Locally. Modify the appropriate Group Policy Object in your environment to grant the user or group this permission.

Collapse -

Interactive Logon

by ins413 In reply to Interactive Logon

Poster rated this answer

Collapse -

Interactive Logon

by umbral-echo In reply to Interactive Logon

"The user does not have the permission to log on interactively" is definitely the log on locally user right as Answer 2 suggests. There are several locations that this could be changed, but the most likely place is the "Local Security Policy" in Administrative Tools (Control Panel).

In this snap-in open the "Local Policies" icon and click on the "User Rights Assignment" icon. This will show two columns, the "Local Setting" and the "Effective Setting". Scan the list for "Log on Locally" and "Deny Log on Locally". These are the user rights that might be causing your problem.

First compare the list of users in both columns to see if they are the same for both user rights. Group Policies set on the domain, site, or OU in Active Directory will always override the Local settings, so you need to note whether or not the settings were changed on the local machine (likely) or the domain (not so likely). The local column should list the user who is having trouble logging on, or a group that user belongs to (users). If not, double-click on the Log on Locally right and add the correct user or group.

If any users are displayed under either column in the "Deny Log on Locally" remove them (unless they were supposed to be there).

If that doesn't correct the problem you need to investigate the Group Policy assigned to the domain (though a normal user shouldn't have the ability to change that - investigate your permissions in this case)

Collapse -

Interactive Logon

by ins413 In reply to Interactive Logon

Poster rated this answer

Collapse -

Interactive Logon

by rmccabe In reply to Interactive Logon

I got this message last week after adding a workstation to the domain for the first time. I removed the machine from the domain, rejoined the domain and all was well. It's worth a try....

Collapse -

Interactive Logon

by ins413 In reply to Interactive Logon

Poster rated this answer

Collapse -

Interactive Logon

by ins413 In reply to Interactive Logon

This question was closed by the author

Back to Windows Forum
9 total posts (Page 1 of 1)  

Related Discussions

Related Forums