Have you ever seen the error below and gone nearly ballistic?

“The local policy on the system does not permit you to logon interactively.”

If you are operating within a Group Policy regulated domain, it is likely that the Logon Locally setting is improperly configured. This policy is in:
Computer Configuration / Windows Settings / Security Settings / Local Policies / User Rights Assignment

Go to the Group Policy Object to which the user belongs that you are trying to log on and change the setting to allow that user to logon locally.

You may find that after you change the setting, the problem remains. This may due the influence of other Group Policy Objects within your Active Directory. If you find Authenticated Users in a Group Policy Object, that GPO could easily be taking precedent over the one you are trying to fix. To reduce the chances of “undue influence” in the future use only user names or specific group names in your Group Policy Objects, not the generalized names (other than Administrators and Guests).

Advertisements