The local policy of this system does not permit you to logon interactively

Hello Gentlemen,
 I need help in this situation I had two domain controllers for testing one it's windows 2000 domain controller example.com netbios name example and second domain controller windows 2003 enterprise domain controller. test.com netbios name test
my clients windows xp service pack2.  I created a dual trust both direction in windows 2003 controller and automatic created the trust in windows 2003 domain controller, by the way windows 2000 controller it's mixed environment.
my windows xp machine logs in to windows 2000 controller with no problem but went I tried to log to windows 2003 controler as administrator or regular user I get this message. logon message (the local policy of this system does not permit you to logon interactively.  I check the local policy under domain controller policy and domain policy and gave access to login from the network to these users but I keep getting this message and I not able to login to windows 2003 controller.

Please help.
rj.
rafael@mrvcs.com
rafaelj_UsAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

gidds99Commented:
There is specifically a "logon locally" policy option.  I cant remember exactly where it is located within the policies but you should find it if you have a look.  The logon from the network option refers to accessing the machine from another on the LAN rather than accessing it locally.

These PAQ's may also help:

http://www.experts-exchange.com/Security/Win_Security/Q_20812967.html

http://www.experts-exchange.com/Security/Win_Security/Q_21042308.html

or

this MSKB article:

http://support.microsoft.com/?kbid=841188

Hope this helps.
0
maninblac1Commented:
If the computer you're trying to access is "user" level on the domain, you must be an admin to login interactively.  However, even that can be disabled.  Make sure your settings on the domain are correct.  Once that's done, make sure you gpupdate the trouble machine.

go to start, run, and type in

gpupdate

if that doesn't work try

gpupdate /force

that will ensure that the problem machine has the latest rules for the domain and its group.
0
rafaelj_UsAuthor Commented:
hi guys I tried all this before I posted this question and the problem was a mistake a did in my windows xp machine.

I am sorry.

My windows xp service pack2 it's a member of the windows  2000 domain controller " example" (netbios name) I was logging off and trying to login to "test" (netbios name for windows 2003 domain controller).

the mistake was I forgot to create a user on windows xp machine to login to 2003 domain controller on control panel users, add user /test/johhny.

Thank you for trying to help me I appreciate.

rj
 





Title: The local policy of this system does not permit you to logon interactively
asked by rafaelj_Us on 04/20/2006 02:52PM PDT  
This question is worth  0 Points  
 
 


please deleted question posted at http://www.experts-exchange.com/Security/Win_Security/Q_21820171.html

I answered the question myselft I forgot to add a user to in the windows xp machine for my 2003 domain controller.

control panel, user accounts, add user.  the user to login to windows 2003 domain controller.

everything works fine now.  

thank you,

maybe this help remind someone of the same mistake.

rj
0
ON-DEMAND: 10 Easy Ways to Lose a Password

Learn about the methods that hackers use to lift real, working credentials from even the most security-savvy employees in this on-demand webinar. We cover the importance of multi-factor authentication and how these solutions can better protect your business!

Keith AlabasterEnterprise ArchitectCommented:
Sounds totally bizarre as you do not 'need' to create local users if the Xp machine has a domain membership. Creating a local user is not going to allow domain logon either so I do not see the tie in. I would have accepted Gidds99 but this is just my view.

Regards
Keith
EE Page Editor
0
rafaelj_UsAuthor Commented:
Hi Keith,

I sounds bizarre but I had already tried the answer from gidds99 and the only think that fixed it was creating a domain user from windows 2003 domain controller and I was able to login.  I never had a problem with two different 2000 domain controllers forest and creating a trust I was able to login but between 2000 and 2003 domain controller there is an issue.  

But thank you for you reply it was appreciated.
rj


There is specifically a "logon locally" policy option.  I cant remember exactly where it is located within the policies but you should find it if you have a look.  The logon from the network option refers to accessing the machine from another on the LAN rather than accessing it locally.

These PAQ's may also help:

http://www.experts-exchange.com/Security/Win_Security/Q_20812967.html

http://www.experts-exchange.com/Security/Win_Security/Q_21042308.html

or

this MSKB article:

http://support.microsoft.com/?kbid=841188

Hope this helps.
0
GranModCommented:
Closed, 125 points refunded.
GranMod
The Experts Exchange
Community Support Moderator of all Ages
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
OS Security

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.