Help with "the local policy of this system does not allow you to logon interactively"

Posted on 2009-12-21
Medium Priority
Last Modified: 2012-05-08
I'm working on someones home PC.  Just the other day when they booted it takes them to the screen where they'd click a user icon but now there aren't any user icons.  Just a blank screen where they can only shut down or restart.  I've hit ctrl-alt-del twice and got the GUI logon and when I try the admin or the user account I get the following message....

"the local policy of this system does not allow you to logon interactively"

I've tried it in safe mode and get the same message.  I've checked all the accounts and they aren't locked.  I tried copying the secuirty file from winnt\repair directory in to the windows\system32\config and that doesn't fix it.  The only thing I haven't done yet is take out the drive and hook it in to one my test PC's and scan it.  Does anyone have a fix for this or any idea?  I'm thinking it must be some sort of a virus but I am not for sure.  I've read about people using ntrights as follows.....

"ntrights -m \\ProblemComputer -u Administrator +r SeInteractiveLogonRight"

I can't seem to figure out of ntrights works with xp or not because microsoft says it only works with 2000.

Thanks in advance.
Question by:pmac38CDS

Expert Comment

ID: 26102229
Basically you need to edit the local policy on the machine.

If you had access to the machine, you would run secpol.msc
Navigate to Local Policies\User Rights Assignment

In there you will find a setting called: "Allow log on locally"
This should normally contain "Administrators", "Backup Operators", "Power Users"

The best bet is to hit F8 when the PC loads, and try "Last known good" configuration. Try it twice in a row. Hopefully this will roll back the setting. When you get back in check the setting yourself.

If the computer is a member of a domain, you can set the value with Group Policy then wait for it to apply. But I am guessing that you are in a home situation where the person doesnt have a domain.
LVL 11

Expert Comment

ID: 26103184
check link could help...


if this computer in LAN... access its registry editor from another computer......

Expert Comment

ID: 26104775
You could try overwriting the C:\WINDOWS\system32\GroupPolicy directory with a default one which would take those restrictions out.

Author Comment

ID: 26108290
I forgot to mention this is XP HOME so I am pretty sure it doesn't have the GroupPolicy Directory.  I am at work and will have to look tonight but I think that home doesn't have that.

Accepted Solution

pmac38CDS earned 0 total points
ID: 26200951
Okay so here is what I ended up doing.  I booted up with a BartPE disk.  I then went and renamed the system file in windws\system32\config to system.old.  Then I copied over a system file from the restore fodler from about 5 days previous when the user said it was working.  Once I did that I rebooted and the problem was solved.  Once in windows then I did a system restore to 5 days earlier so It would restore all the files and not just the one I did.

Featured Post

Vote for the Most Valuable Expert

It’s time to recognize experts that go above and beyond with helpful solutions and engagement on site. Choose from the top experts in the Hall of Fame or on the right rail of your favorite topic page. Look for the blue “Nominate” button on their profile to vote.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

We have adopted the strategy to use Computers in Student Labs as the bulletin boards. The same target can be achieved by using a Login Notice feature in Group policy but it’s not as attractive as graphical wallpapers with message which grabs the att…
If you have done a reformat of your hard drive and proceeded to do a successful Windows XP installation, you may notice that a choice between two operating systems when you start up the machine. Here is how to get rid of this: Click Start Clic…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question