Can't logon because of Local Poicy

[Guest]

Archived from groups: microsoft.public.windowsnt.misc (More info?)

I was working on an NT 4.0 Server. When I am trying to logon to the domain
using administrator account I get the following message "Local Policy of this
system doesn't permit you to logon interactively"

I don't have this problem when I logon to the system itself with this same
account. I was refering to simalr incidents on the user forum but I couldn't
get one. Can somebody help me how to fix this problem?

 

[Guest]

Archived from groups: microsoft.public.windowsnt.misc (More info?)

Getch,

Have you confirmed that the NT 4.0 server is a member of the domain you are
trying to logon to? That would be the first thing to check.

Second, I would verify (or re-verify) the group memberships. Log into the
system locally with the administrator account (the one that currently works)
and check that the Domain Admins group is a member of the local
Administrators group. You need to see an entry like "<domain>\Domain
Admins" (without the quotes, and with the name of your domain substituted
for <domain>).

I have run into situations before where the local administrator of a system
would remove the "Domain Admins" entry from the local Administrators group
for various reasons (their idea of security, to be "helpful", etc).



Hope this helps. Thanks.

--
William Hutchison [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.


"Getch" <Getachewdires@hotmail.com> wrote in message
news:BD19CCCC-3D53-41B0-A1D6-D5CD78FBBCD1@microsoft.com...
>I was working on an NT 4.0 Server. When I am trying to logon to the domain
> using administrator account I get the following message "Local Policy of
> this
> system doesn't permit you to logon interactively"
>
> I don't have this problem when I logon to the system itself with this same
> account. I was refering to simalr incidents on the user forum but I
> couldn't
> get one. Can somebody help me how to fix this problem?

 

[Guest]

Archived from groups: microsoft.public.windowsnt.misc (More info?)

This is to thank you very much. Your suggestion worked well and now I could
login to the domain.

Thank you ance again

"William Hutchison [MSFT]" wrote:

> Getch,
>
> Have you confirmed that the NT 4.0 server is a member of the domain you are
> trying to logon to? That would be the first thing to check.
>
> Second, I would verify (or re-verify) the group memberships. Log into the
> system locally with the administrator account (the one that currently works)
> and check that the Domain Admins group is a member of the local
> Administrators group. You need to see an entry like "<domain>\Domain
> Admins" (without the quotes, and with the name of your domain substituted
> for <domain>).
>
> I have run into situations before where the local administrator of a system
> would remove the "Domain Admins" entry from the local Administrators group
> for various reasons (their idea of security, to be "helpful", etc).
>
>
>
> Hope this helps. Thanks.
>
> --
> William Hutchison [MSFT]
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
> "Getch" <Getachewdires@hotmail.com> wrote in message
> news:BD19CCCC-3D53-41B0-A1D6-D5CD78FBBCD1@microsoft.com...
> >I was working on an NT 4.0 Server. When I am trying to logon to the domain
> > using administrator account I get the following message "Local Policy of
> > this
> > system doesn't permit you to logon interactively"
> >
> > I don't have this problem when I logon to the system itself with this same
> > account. I was refering to simalr incidents on the user forum but I
> > couldn't
> > get one. Can somebody help me how to fix this problem?
>
>
>