I created a new OU and a new user (he'll be an administrative assistant with limited administration) in Active Directory Users and Computers. I want to allow certain administrative priveleges to this user. The only problem is that when I have that user logon locally to the server, I get a message stating "user can't logon interactively". I knew where to change that option in NT 4.0, but I can't figure this out on Windows 2000 Server. Please help.