Windows XP client and windows 2000 server. I have tried his account from several places though and none of them make any difference.
Main Topics
Browse All TopicsI have 2 domain controllers and one of the domain admin accounts gets the following error when logging on to either one by terminal server. Your interactive logon privilege has been disabled Contact your system administrator. The account is a domain admin, i checked the default domain controller policy, Local security policy and the default domain policy, All are set to allow this account to login. I also checked the security on the terminal sever config RDP-tcp (It won't let him log into it via terminal server either which is the normally what he does since he is not at our site) I would just do a new account but this one is tied to some services, (Bad idea i know but it was done before i took over here). he can terminal serve onto any other server we have just the domain controller won't let him in.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
The only thing I can think of, is like Netman said, check AD Users&Computers, open the properties for that user and check the "Terminal Services Profile" make sure "Allow logon to terminal server" is checked. Though that would be sort of weird since you said "he can terminal serve onto any other server we have just the domain controller won't let him in." Maybe check the local security groups on that server to make sure that account isn't in a group that's denied access.
hmmm.. was there anything different that you did to your environment that may have caused problems? Are others able to use the same service w/ different user name? Take a look at these, although it sounds like you already have:
http://support.microsoft.c
http://support.microsoft.c
JK
Business Accounts
Answer for Membership
by: neoponderPosted on 2005-08-15 at 06:52:35ID: 14674407
is this on 2000 server or 20003? Which client?