IT Employment

Ask something
Discussion Locked

Local strategy...

0 helpful
6 replies

by nomadmin

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi,

I get this message,when I try to load the session of a new user i created on W2K, the message said :

"The local strategy doesnt allowed you to load interactive session"

"La strategie local ne vous permet pas d'ouvir une session d'une maniere interactive"

I checked the local strategy in my Administrator's tools but, I didnt noticed nothing
Any suggestions?.

Thanks

6 replies

by lordinfidel

Log on as admin and go to start/programs/admin tools/local security policy.

Under user rights, check to see if that user has log on locally rights. Or if they belong to a group that has that right.

If they don't, they need to be added or their group membership needs to change to a group that does.

by nomadmin

Hi again,

I Checked my Local Security Policy, to two computers one of them has no problem to log using other accounts not admin, and other one has the problem logging all the accounts not admin, either localy or to the domain, and I noticed this :
- The presence of this three groups of users in the computer where is the problem, with * before evry group

-*S-15-32-550
-*S-15-32-549
-*S-15-32-548

Or different unchecked box for the choice of the digital signature of the server, enabledand disabled at once

Thats all, maybe has a realtion to my problem maybe not.

Any suggestions?

Thats all i noticed

by lordinfidel

You have orphaned accounts.

If this machine is in a domain setting, it has lost it's computer account in the domain. And it can not resolve the sid's to friendly user names.

Remove the accounts, and see if you can add in the appropiate local accounts:
Administrators, System, users

by nomadmin

Well, the computers joined the domain, but i can't find the accounts in the users list or the groups list, evrything is normal there, i have two users :

Administrator
Customer (the account i created)

and eight groups of users seems standard

I would ask about where can i find the orphaned accounts,?

NB: the suspect computers joined my domain

by lordinfidel

An orphaned account would be if the system once belonged to a domain, then it was removed and joined to a different domain.

The sids would appear instead of the friendly user name.

I can't tell you exactly where to look, it's not that easy.What you can do is remove those users(sids) from the log on locally policy. And add in the correct groups. I always prefer local groups. Local groups will contain the global groups.

You could though write down the sids and then look in the regisrty under hkey_Users and see if anything matches.

by nomadmin

happy new year to you and i am sorry to be late you know vancance,
I had to re-install windows to start with the new year then the problem will resolved, if it not i will back and discuss again about it or try your last ideas,

Happy new year to all the members of this republic

This discussion is closed to new replies.