Not permitted to logon interactively.

This is a problem that turns up periodically.  I have it right now.  I have one Windows XP machine which does not allow users to logon interactively (except the administrator).  The machine is on a Windows 2K server network. They are not in the deny logon locally group and, on the Domain Controller, they are in the Allow local logon group.  I have used the Windows resource kit application NTrights to specifically allow the SeInteractiveLogonRight for this user.  I get a message that this right has been set successfully.  The machine allows the user to logon once.  Then it will not allow the user to logon again.  

I have seen Windows 2K workstations do this repeatedly, but never an XP workstation.  I just don't seem to be able to find anything on this.  

I read something about an interactive logon group in another post, but can't find that group anywhere.  

Any help would be appreciated.  
snurd3Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Jay_Jay70Commented:
Hi snurd3,

you dont need to be looking at policies on the DC you need to look locally

check the seem logon policy on the local machine   gpedit.msc

Cheers!
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Kini pradeepDevelopment ManagerCommented:
agreed:
--------
you need to check whether the same user gets the message on the the Xp w/s.
you could run the gpresult for the user.
usually the message that " the local policy of the system prevents you from logging on interactively" could very well mean that the policy is either getting applied somewhere or is getting overwritten, on xp you could run the RSOP.msc to find the resultant set of policies.
the policy get applied in this order
local.
site.
domain
OU.
since the user logs in to the domain check the DC policy as well.check whether there are any policies affecting this user.

--------------------------------------------------------------------------------------------------------
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
OS Security

From novice to tech pro — start learning today.