|
|
Question : Logging onto a Domain Controller
|
|
We have a AD setup on Windows 2003 Servers. We can only log onto to a DC with a Domain Admin login. If we try login as a normal user we get the message "The local policy of this system does not permit you to logon interactively"
What can I do to permit the logging in, or are there any system groups that I can add the user to apart from Domain admins to allow them to login?
Thanks
|
Answer : Logging onto a Domain Controller
|
|
hopefully this will fix http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:80/support/kb/articles/Q247/9/89.ASP&NoWebContent=1
RESOLUTION To work around this issue, modify the Group Policy Object for the domain controller: 1. Click Start, point to Programs, point to Administrative Tools, and then click Domain Controller Security Policy. 2. Double-click the Security Settings folder, double-click Local Policies, and then click User Rights Assignment. 3. Under the Policy column, click Log on Locally, and then click Add. 4. Click Browse, click the appropriate group, and then click Add. 5. Click OK, click OK, and then click OK. 6. At a command prompt, type secedit /refreshpolicy machine_policy /enforce, press ENTER, and then press ENTER.
|
|
|
|
|