Avatar of No1Coder
No1CoderFlag for United States of America asked on

Group Policy Issue/Active Directory

I am having trouble adding a new user to my system and having them be able to log on...

I have a server which is my active directory server.  On that box, I used "Active Directory Users and Computers" to add the new person.

On a second server that hosts IIS, I setup a site that uses windows authentication  When I try and enter the credentials for the new user, the logon fails with "401 - Unauthorized: Access is denied due to invalid credentials.".  Other users which have been previously created work fine.

When I go to group policy object editor, and drill down to "Local computer Policy\computer configuration\windows settings\security settings\Local policies\User rights assignments", I see that the setting "Access this computer from the network" does not have the new user included.  When I try and add the user, the "add user or group" button is greyed out.  Other users that can successfully log on are included in this list, so I think this is the problem.  How to I add the new person to that list?  Why Grayed out?

I have tried synching ad using "gpupdate /force".  I have tried rebooting both servers.  What am I missing?

The AD server is running W2008, the Web server is running W2012.

Also, I can log on to the server using remote desktop using the new users credentials.
Microsoft Legacy OSMicrosoft Server OSActive Directory

Avatar of undefined
Last Comment
Sandesh Dubey

8/22/2022 - Mon
Sumesh BNR

Grayed out may be means you have added domain users already.Set the web directory permission settings add the newly created user there
Sarang Tinguria

check the permissions in IIS
ASKER
No1Coder

I added full access or that specific user to the drive where the web sites exist.  It didn't help.  Not sure what else to try.

Also, I confirmed that when I try an log on using FTP to that server, I get "User cannot log in" error.
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes
ASKER
No1Coder

Does anyone know how to add users to the "Access this computer from the network" when the button is greyed out?

This is not in the help, and I can't fine anything on web.
ASKER CERTIFIED SOLUTION
Sandesh Dubey

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question