Local policy of this system does not permit you to logon interacti

[Guest Eli]

Domain controller 2008 SP1

Desktop XP SP3

Trying to login to a desktop (not a server) with a regular user credentials

using Remote Desktop.

Got an error “The local policy of this system does not permit you to logon

interactively”.

The user account in question is a member of Remote Desktops Group.

As far as GPO- allow logon thru… and deny… options are “not defined”. They

are set as default.

What else I need to change to login thru remote desktop?

[Guest Bruce Sanderson]

Re: Local policy of this system does not permit you to logon interacti

 

Computer Configuration, Administrative Templates, Windows Components,

Terminal Services, Terminal Server, Connections, "Allow users to connect

remotely using Terminal Services".

 

You should not need to Define Computer Configuration, Windows Settings,

Security Settings, Local Policies, User Rights, "Allow log on through

Terminal Services" becuase the default for this is to allow members of the

local groups Administrators and Remote Desktop Users to logon (servers and

workstations, but not domain controllers).

 

By default, the Remote Desktop Users group is empty; you can populate this

using a GPO using the settings at Computer Configuration, Windows Settings,

Security Settings, Restricted Groups - use the Member Of option to add

groups to local groups.

 

--

Bruce Sanderson

http://members.shaw.ca/bsanders/

It's perfectly useless to know the right answer to the wrong question.

 

 

"Eli" <eli@newsgroup.nospam> wrote in message

news:51A09D7A-1050-4B32-83F9-B44815429E45@microsoft.com...

> Domain controller 2008 SP1

> Desktop XP SP3

> Trying to login to a desktop (not a server) with a regular user

> credentials

> using Remote Desktop.

> Got an error “The local policy of this system does not permit you to logon

> interactively”.

> The user account in question is a member of Remote Desktops Group.

> As far as GPO- allow logon thru… and deny… options are “not defined”. They

> are set as default.

> What else I need to change to login thru remote desktop?

>

[Guest Morgan che]

RE: Local policy of this system does not permit you to logon interacti

 

Hi,

 

Thanks for posting here.

 

I agree with Bruce. Please test the suggtions listed in Bruce's post. If

you need further asisstance, please post back.

 

Thanks.

 

Sincerely

Morgan Che

Microsoft Online Support

Microsoft Global Technical Support Center

 

Get Secure! - http://www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so

that others may learn and benefit from your issue.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

 

 

--------------------

--->Thread-Topic: Local policy of this system does not permit you to logon

interacti

--->thread-index: AckDAdgXoUgcIiPtSreILP2FiPSoxg==

--->X-WBNR-Posting-Host: 207.46.19.197

--->From: =?Utf-8?B?RWxp?= <eli@newsgroup.nospam>

--->Subject: Local policy of this system does not permit you to logon

interacti

--->Date: Wed, 20 Aug 2008 13:18:01 -0700

--->Lines: 11

--->Message-ID: <51A09D7A-1050-4B32-83F9-B44815429E45@microsoft.com>

--->MIME-Version: 1.0

--->Content-Type: text/plain;

---> charset="Utf-8"

--->Content-Transfer-Encoding: 8bit

--->X-Newsreader: Microsoft CDO for Windows 2000

--->Content-Class: urn:content-classes:message

--->Importance: normal

--->Priority: normal

--->X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.3119

--->Newsgroups: microsoft.public.windows.server.general

--->Path: TK2MSFTNGHUB02.phx.gbl

--->Xref: TK2MSFTNGHUB02.phx.gbl

microsoft.public.windows.server.general:43564

--->NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149

--->X-Tomcat-NG: microsoft.public.windows.server.general

--->

--->Domain controller 2008 SP1

--->Desktop XP SP3

--->Trying to login to a desktop (not a server) with a regular user

credentials

--->using Remote Desktop.

--->Got an error “The local policy of this system does not permit you to

logon

--->interactively”.

--->The user account in question is a member of Remote Desktops Group.

--->As far as GPO- allow logon thru… and deny… options are “not

defined”. They

--->are set as default.

--->What else I need to change to login thru remote desktop?

--->

--->

[Guest Dusko Savatovic]

Re: Local policy of this system does not permit you to logon interacti

 

Hi Eli,

 

Try on the Domain controller:

Admin Tools

Domain Controller Security Policy (beware, do not use 'Domain Security

Policy'!)

Computer Configuration

Windows Settings

Security Settings

Local Policy

User Rights Assignments

Allow logon locally. (Add 'Users' or specific user here).

 

HTH,

Dush

 

 

"Eli" <eli@newsgroup.nospam> wrote in message

news:51A09D7A-1050-4B32-83F9-B44815429E45@microsoft.com...

> Domain controller 2008 SP1

> Desktop XP SP3

> Trying to login to a desktop (not a server) with a regular user

> credentials

> using Remote Desktop.

> Got an error “The local policy of this system does not permit you to logon

> interactively”.

> The user account in question is a member of Remote Desktops Group.

> As far as GPO- allow logon thru… and deny… options are “not defined”. They

> are set as default.

> What else I need to change to login thru remote desktop?

>

[Guest Morgan che]

RE: Local policy of this system does not permit you to logon interacti

 

Hi,

 

I am wirting to see how evertything is going?

 

Have this issue been sovled or you need further assistance? please feel

free to let me know.

Sincerely

Morgan Che

Microsoft Online Support

Microsoft Global Technical Support Center

 

Get Secure! - http://www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so

that others may learn and benefit from your issue.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

 

 

--------------------

--->Thread-Topic: Local policy of this system does not permit you to logon

interacti

--->thread-index: AckDAdgXoUgcIiPtSreILP2FiPSoxg==

--->X-WBNR-Posting-Host: 207.46.19.197

--->From: =?Utf-8?B?RWxp?= <eli@newsgroup.nospam>

--->Subject: Local policy of this system does not permit you to logon

interacti

--->Date: Wed, 20 Aug 2008 13:18:01 -0700

--->Lines: 11

--->Message-ID: <51A09D7A-1050-4B32-83F9-B44815429E45@microsoft.com>

--->MIME-Version: 1.0

--->Content-Type: text/plain;

---> charset="Utf-8"

--->Content-Transfer-Encoding: 8bit

--->X-Newsreader: Microsoft CDO for Windows 2000

--->Content-Class: urn:content-classes:message

--->Importance: normal

--->Priority: normal

--->X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.3119

--->Newsgroups: microsoft.public.windows.server.general

--->Path: TK2MSFTNGHUB02.phx.gbl

--->Xref: TK2MSFTNGHUB02.phx.gbl

microsoft.public.windows.server.general:43564

--->NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149

--->X-Tomcat-NG: microsoft.public.windows.server.general

--->

--->Domain controller 2008 SP1

--->Desktop XP SP3

--->Trying to login to a desktop (not a server) with a regular user

credentials

--->using Remote Desktop.

--->Got an error “The local policy of this system does not permit you to

logon

--->interactively”.

--->The user account in question is a member of Remote Desktops Group.

--->As far as GPO- allow logon thru… and deny… options are “not

defined”. They

--->are set as default.

--->What else I need to change to login thru remote desktop?

--->

--->