I have a windows 2000 server set up as the domain controller running AD. I have 7 workstations running windows 98se and three workstations running windows 2000 professional. I have no problem logging into the doamin from any of the windows 98 workstations, but cannot log into the domain from the windows 2000 prof workstations unless the user has administrative rights on the server. If the user logs into the local workstation he can then see the server and I can map drives and access the internet through the firewall and router. However, if that same user tries to log into the domain, I get the error "the local policy of this system does not permit you to logon interactively". I have searched everywhere for an answer and cannot find a solution. I have checked in the domain controller security policy and the domain security policy and there are no entries that "deny logon locally" and I have added this user in "allow logon locally" and this does not solve the problem. I really do not think that I am trying to logon locally, just log into the domain. What is really baffeling me is that the problem is limited to the windows 2000 prof machines and not the windows 98 ones. I could use some help.