Not permitted to logon interactively.

This is a problem that turns up periodically.  I have it right now.  I have one Windows XP machine which does not allow users to logon interactively (except the administrator).  The machine is on a Windows 2K server network. They are not in the deny logon locally group and, on the Domain Controller, they are in the Allow local logon group.  I have used the Windows resource kit application NTrights to specifically allow the SeInteractiveLogonRight for this user.  I get a message that this right has been set successfully.  The machine allows the user to logon once.  Then it will not allow the user to logon again.  

I have seen Windows 2K workstations do this repeatedly, but never an XP workstation.  I just don't seem to be able to find anything on this.  

I read something about an interactive logon group in another post, but can't find that group anywhere.  

Any help would be appreciated.  
Who is Participating?
Hi snurd3,

you dont need to be looking at policies on the DC you need to look locally

check the seem logon policy on the local machine   gpedit.msc

Kini pradeepPrincipal Cloud and security consultantCommented:
you need to check whether the same user gets the message on the the Xp w/s.
you could run the gpresult for the user.
usually the message that " the local policy of the system prevents you from logging on interactively" could very well mean that the policy is either getting applied somewhere or is getting overwritten, on xp you could run the RSOP.msc to find the resultant set of policies.
the policy get applied in this order
since the user logs in to the domain check the DC policy as well.check whether there are any policies affecting this user.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.