?
Solved

Logging onto a Domain Controller

Posted on 2006-07-06
5
Medium Priority
?
501 Views
Last Modified: 2012-05-05
We have a AD setup on Windows 2003 Servers. We can only log onto to a DC with a Domain Admin login.
If we try login as a normal user we get the message "The local policy of this system does not permit you to logon interactively"

What can I do to permit the logging in, or are there any system groups that I can add the user to apart from Domain admins to allow them to login?

Thanks
0
Comment
Question by:bax2000
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
5 Comments
 
LVL 9

Accepted Solution

by:
imnajam earned 500 total points
ID: 17049626
hopefully this will fix http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:80/support/kb/articles/Q247/9/89.ASP&NoWebContent=1

RESOLUTION
To work around this issue, modify the Group Policy Object for the domain controller: 1. Click Start, point to Programs, point to Administrative Tools, and then click Domain Controller Security Policy.
2. Double-click the Security Settings folder, double-click Local Policies, and then click User Rights Assignment.
3. Under the Policy column, click Log on Locally, and then click Add.
4. Click Browse, click the appropriate group, and then click Add.
5. Click OK, click OK, and then click OK.
6. At a command prompt, type secedit /refreshpolicy machine_policy /enforce, press ENTER, and then press ENTER.
0
 
LVL 26

Expert Comment

by:Pber
ID: 17050421
imnajam,

He has a 2003 OS, so step 6 would be gpupdate /force
0
 

Author Comment

by:bax2000
ID: 17477379
Thanks imnajam you helped solve this problem.
This can now be closed.
0
 
LVL 9

Expert Comment

by:imnajam
ID: 17529801
Thank Pber for the correction and thanks bax for the grade and points:)
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …
Add bar graphs to Access queries using Unicode block characters. Graphs appear on every record in the color you want. Give life to numbers. Hopes this gives you ideas on visualizing your data in new ways ~ Create a calculated field in a query: …

718 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question