Help with "the local policy of this system does not allow you to logon interactively"

Posted on 2009-12-21
Last Modified: 2012-05-08
I'm working on someones home PC.  Just the other day when they booted it takes them to the screen where they'd click a user icon but now there aren't any user icons.  Just a blank screen where they can only shut down or restart.  I've hit ctrl-alt-del twice and got the GUI logon and when I try the admin or the user account I get the following message....

"the local policy of this system does not allow you to logon interactively"

I've tried it in safe mode and get the same message.  I've checked all the accounts and they aren't locked.  I tried copying the secuirty file from winnt\repair directory in to the windows\system32\config and that doesn't fix it.  The only thing I haven't done yet is take out the drive and hook it in to one my test PC's and scan it.  Does anyone have a fix for this or any idea?  I'm thinking it must be some sort of a virus but I am not for sure.  I've read about people using ntrights as follows.....

"ntrights -m \\ProblemComputer -u Administrator +r SeInteractiveLogonRight"

I can't seem to figure out of ntrights works with xp or not because microsoft says it only works with 2000.

Thanks in advance.
Question by:pmac38CDS
    LVL 2

    Expert Comment

    Basically you need to edit the local policy on the machine.

    If you had access to the machine, you would run secpol.msc
    Navigate to Local Policies\User Rights Assignment

    In there you will find a setting called: "Allow log on locally"
    This should normally contain "Administrators", "Backup Operators", "Power Users"

    The best bet is to hit F8 when the PC loads, and try "Last known good" configuration. Try it twice in a row. Hopefully this will roll back the setting. When you get back in check the setting yourself.

    If the computer is a member of a domain, you can set the value with Group Policy then wait for it to apply. But I am guessing that you are in a home situation where the person doesnt have a domain.
    LVL 11

    Expert Comment

    check link could help...

    if this computer in LAN... access its registry editor from another computer......
    LVL 2

    Expert Comment

    You could try overwriting the C:\WINDOWS\system32\GroupPolicy directory with a default one which would take those restrictions out.
    LVL 1

    Author Comment

    I forgot to mention this is XP HOME so I am pretty sure it doesn't have the GroupPolicy Directory.  I am at work and will have to look tonight but I think that home doesn't have that.
    LVL 1

    Accepted Solution

    Okay so here is what I ended up doing.  I booted up with a BartPE disk.  I then went and renamed the system file in windws\system32\config to system.old.  Then I copied over a system file from the restore fodler from about 5 days previous when the user said it was working.  Once I did that I rebooted and the problem was solved.  Once in windows then I did a system restore to 5 days earlier so It would restore all the files and not just the one I did.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Highfive + Dolby Voice = No More Audio Complaints!

    Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

    We have adopted the strategy to use Computers in Student Labs as the bulletin boards. The same target can be achieved by using a Login Notice feature in Group policy but it’s not as attractive as graphical wallpapers with message which grabs the att…
    If you have done a reformat of your hard drive and proceeded to do a successful Windows XP installation, you may notice that a choice between two operating systems when you start up the machine. Here is how to get rid of this: Click Start Clic…
    This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
    Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now