Log on locally appears to be disabled


I'm running into a SQL Server SSIS problem, so I needed to run a program as a plain jane user.   So I created a new user and by default they were added to the "Users" group.. So far so good.

I then tried to login as this user and received the "The local security policy does not allow you to login interactively".

So I logged back in as the local administrator and checked the Local Policies / User Rights Assignment / Log on locally.     And sure enough, my new test user was not there... BUT... The entire box is grey'd out and I can't add or delete any user or group.   I've tested this 3 or 4 times and rebooted, logged in/logged out etc.    Log On as a service is unavailable for changes also.

Any thoughts?

Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Is this on a domain?  A domain policy might be over-riding your local policy.  Also, your administrator account may not have permissions to edit parts of the security policy.  Check there permissions.
wsaharemAuthor Commented:
Yes, it's on a domain, but I checked 2 other machines in the same domain and they didn't have the same issue.

I'm not sure where to check to see if the administrator has rights for parts of the security policy.

Hi wsaharem,

have you logged on with the local administrator account and tried (not domain admin)

Discover the Answer to Productive IT

Discover app within WatchGuard's Wi-Fi Cloud helps you optimize W-Fi user experience with the most complete set of visibility, troubleshooting, and network health features. Quickly pinpointing network problems will lead to more happy users and most importantly, productive IT.

wsaharemAuthor Commented:
Yes, when troubleshooting I'm logged in as the local machine administrator.

Have you verified that the other 2 computers you checked are in the same ou as your computer.
Perhaps you are receiving different policies.

If you can look in AD Users and Computers that would be the easiest way
or you can issue this command on the computers to list the applied group policies.
gpresult /scope:computer
wsaharemAuthor Commented:
I'm just went ahead and took a brute force method rather than trying to figure out what the problem was.     I went ahead and removed the computer from the domain which gave me access to the security groups.  I then added the computer back to the domain and still had access to the Local Security Settings \ Log on locally.    

Symptoms fixed
PAQed with points refunded (500)

Community Support Moderator

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
OS Security

From novice to tech pro — start learning today.