Error Message: The Local Policy of This System Does Not Allow You to Log On Interactively (273720)
The information in this article applies to:
- Microsoft Windows 2000 Server
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Datacenter Server
This article was previously published under Q273720 SYMPTOMS When you join a Microsoft Windows 2000 domain, restart your
computer, and then log on, you receive the following error message:
The local policy of this system does not allow you to
log on interactively. CAUSE This behavior occurs when a domain policy, at the site,
domain, or organizational unit, has a configuration that denies all users the
Log on Locally user right. RESOLUTION To resolve this issue, check the default domain policy to
confirm that the Log on Locally user right, is not defined or is defined to
include everyone who is able to log on to domain member computers. To check the
default domain policy, follow these steps: - Start the Active Directory Users and Computers
snap-in.
- Right-click the domain and click Properties.
- Click Group Policy.
- Double-click Default Domain Policy.
- Click Computer Configuration, click Windows Settings, and then click Security Settings.
- Click Local Policies, click User Rights Assignments, and then click Log on Locally.
NOTE: Only the users that are in the list for this user right should
have the right to log on locally to domain member computers. - Add Domain Users or Everyone or undefine the policy (which
is the default setting).
| Modification Type: | Major | Last Reviewed: | 2/28/2006 |
|---|
| Keywords: | kberrmsg kbGPO kbprb KB273720 |
|---|
|