Solved

Logon Interactively

Posted on 2000-03-08
2
314 Views
Last Modified: 2010-04-14
I created a new OU and a new user (he'll be an administrative assistant with limited administration) in Active Directory Users and Computers. I want to allow certain administrative priveleges to this user. The only problem is that when I have that user logon locally to the server, I get a message stating "user can't logon interactively". I knew where to change that option in NT 4.0, but I can't figure this out on Windows 2000 Server. Please help.
0
Comment
Question by:palove
2 Comments
 
LVL 95

Expert Comment

by:Lee W, MVP
ID: 2596925
The Administrative tools:

Domain Security Policy
Local Security Policy

contain the settings you need to modify.

I wish I could tell you which take priority, but I got this working by making sure both were set to allow it
0
 
LVL 1

Accepted Solution

by:
osxserver earned 100 total points
ID: 2598861
this option was called user policy rights in windowsNT and accessed via usrmgr.  windows2000 uses MMC snapins to assign user rights and policies.

use the computer management snapin:

start | programs | administrative tools | computer management

expand the system tools branch in the left pane, then expand the following:

group policy\windows settings\security settings\local policies\user rights assignment

double click on the user right you want to grant

click add and select the users/groups.

click ok then done.

click ok to close the user right assignment.

keep in mind, if you are setting this for a domain controller, then dc's are OUs, called domain controllers which have settings for user rights.  those settings will override any settings on the local computer.

to change the group policy object for the dc ou, right click on the ou in active directory users and computer, then select properties and then the group policy tab.

good luck
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
demote crashed domain controller (server 2000) 3 997
Outlook 2013 Certicate error 1 286
Windows 2000 Server Pagefile.sys Error 7 647
Screen Mirroring 7 55
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
A customer recently asked me about anti-malware and the different deployment options available for his business. Daily news about cyberattacks, zero-day vulnerabilities, and companies that suffered a security breach made him wonder if the endpoint a…
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now