I got Terminal Services working....

My server is a domain controller.

I created a user for my brother to login with...

as Administrator I am able to login
my brother (in the Users group) cannot login....

gives him this error:
"The Local Security Policy of this system does not allow you to login interactively"

I can't find anything concerning this in the local security snap-in or the domain controller configs

I tried a google search, but that applied to the 2003 server.....

5 years working for Microsoft support kinda makes me qualified to answer.

On a Domain controller it is required that a user be a member of the domain admins group to log in locally. To use terminal services in remote admin mode, you have to have log on locally rights.

In short, you can do 2 things.

1. Setup custom permissions to allow your brother to log on locally. This would mean manually setting permissions on the Domain controller.

2. Make him a domain admin.


The first one is more secure, the second is easier.


Clay Perrine, MCSE
International Network Services

QUOTE (ClayPerrine @ Aug 11 2005, 11:03 AM)

On a Domain controller it is required that a user be a member of the domain admins group to log in locally.

Or be added to the Log in Locally user right. If it's a domain controller look in the GPO for Domain Controllers add the user to the User Rights Assignment policy (not the Default GPO for the Domain).

Eddie Williams, MCSE
PESystems, Inc.

QUOTE (ClayPerrine @ Aug 11 2005, 10:03 AM)

The first one is more secure, the second is easier.

Andy Schmidt, CTO
veriLegal, Inc.

Brit...





Miles Hendrix
Tidewater/TSiM Publishing

a little as i know... your trying to give your brother use of win2000 without having to buy it? i know i recieve updates frequently. won't ms catch on? like i said. i know nozzing (sgt shultz voice). HOGAAAAN!!!

k

so clay, why can't I just enable some login locally thing in the domain controller settings? for the domain users group...

Here is your answer.

Why it doesn't work, how to make it work:

http://support.microsoft.com/default.aspx?...b;en-us;q247989

I don't know if I'm qualified, but I can get the job!

Matt Harrison MCSE, CCA
Trustmark National Bank

DOMAIN DOMAIN DOMAIN

LOCAL LOCAL LOCAL



M

okay...


thank you!