+ Post New Thread
Results 1 to 13 of 13
Windows Thread, URGENT help please : only domain admins can log on :( across whole site... in Technical; Everyone else gets the error: "the local policy of this system does not allow you to log on interactively" Apparently ...
  1. #1
    kennysarmy's Avatar
    Join Date
    Oct 2005
    Location
    UK
    Posts
    1,321
    Thank Post
    84
    Thanked 47 Times in 33 Posts
    Rep Power
    31

    URGENT help please : only domain admins can log on :( across whole site...

    Everyone else gets the error:

    "the local policy of this system does not allow you to log on interactively"

    Apparently there was a power cut in the holidays and I've come in to bedlam...

    Any ideas?

  2. #2

    EduTech's Avatar
    Join Date
    Aug 2007
    Location
    Reading
    Posts
    5,074
    Thank Post
    160
    Thanked 937 Times in 731 Posts
    Blog Entries
    3
    Rep Power
    275
    Check this, although i think it is unlikely to be so as it don't change on its own

    • Start the Active Directory Users and Computers snap-in.
    • Right-click the domain and click Properties.
    • Click Group Policy.
    • Double-click Default Domain Policy.
    • Click Computer Configuration, click Windows Settings, and then click Security Settings.
    • Click Local Policies, click User Rights Assignments, and then click Log on Locally.

    NOTE: Only the users that are in the list for this user right should have the right to log on locally to domain member computers.
    Add Domain Users or Everyone or undefine the policy (which is the default setting).

    Source: Error Message&#58 The Local Policy of This System Does Not Allow You to Log On Interactively

    also,

    http://answers.microsoft.com/en-us/w...a-455b7c82ef0f

    James.
    Last edited by EduTech; 26th April 2011 at 09:12 AM.

  3. #3

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    9,226
    Thank Post
    658
    Thanked 2,250 Times in 1,032 Posts
    Blog Entries
    23
    Rep Power
    670
    Hmm. If there was a powercut it may be prudent to shut down the server room and reboot everything in order. From the router, switches then servers in order of roles (DC's first etc.). Yes, there will be complaints as this may take up to half an hour depending on the size of your network, but if server replications have been messed around with it will save time in the long run as at leat you know that all the servers have started in the correct order and you will be able to use the logs better for fault finding. It's better than having no network at all!! Oh, and check the date/time on your servers as well once they come back up.

  4. #4

    Join Date
    Dec 2008
    Location
    Essex
    Posts
    2,144
    Thank Post
    1
    Thanked 326 Times in 316 Posts
    Rep Power
    77
    I would check what James has suggested, also, for any other GPO's that you may have applied at the OU level, i.e if you have a OU for computers/laptops etc...

    If the issue still remains, get results from gpresult and post here.

    Sukh

  5. #5

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,821
    Thank Post
    272
    Thanked 1,140 Times in 1,036 Posts
    Rep Power
    350
    I doubt the gpo would be changed by a powercut - i would do what DOS_BOX has suggested personally.

  6. #6

    EduTech's Avatar
    Join Date
    Aug 2007
    Location
    Reading
    Posts
    5,074
    Thank Post
    160
    Thanked 937 Times in 731 Posts
    Blog Entries
    3
    Rep Power
    275
    Quote Originally Posted by glennda View Post
    I doubt the gpo would be changed by a powercut - i would do what DOS_BOX has suggested personally.
    I suggested it, because 1) I don't know if someone has been making any changes over the course of the holiday period and 2) if someone has changed it by accident it may not of became apparent until the whole system has gone down and come back up (wrong).

    I agree with you, that it is unlikely a power cut to change a GPO because that would just be madness and crazy and well anyone who thought that should be... well i won't say - agreed that you should reboot everything i assumed that it may of already done tbh.

    James.

  7. #7
    kennysarmy's Avatar
    Join Date
    Oct 2005
    Location
    UK
    Posts
    1,321
    Thank Post
    84
    Thanked 47 Times in 33 Posts
    Rep Power
    31
    On to something - thanks

  8. #8
    zag
    zag is online now
    zag's Avatar
    Join Date
    Mar 2007
    Posts
    3,906
    Thank Post
    954
    Thanked 449 Times in 379 Posts
    Blog Entries
    12
    Rep Power
    92
    Make a new user in a new OU with a new group policy and see if it works.

    If it does then it may be something to do with a corrupt group policy.

  9. #9
    kennysarmy's Avatar
    Join Date
    Oct 2005
    Location
    UK
    Posts
    1,321
    Thank Post
    84
    Thanked 47 Times in 33 Posts
    Rep Power
    31
    Bl**dy H*ll

    Issue was caused by an engineer who had been trying to fix our backup solution editing our default domain policy

    Just got him to reset all the things he changed and we are back to normal.

    Thanks for all the replies.

    Time for a coffee.....

  10. #10

    EduTech's Avatar
    Join Date
    Aug 2007
    Location
    Reading
    Posts
    5,074
    Thank Post
    160
    Thanked 937 Times in 731 Posts
    Blog Entries
    3
    Rep Power
    275
    Quote Originally Posted by kennysarmy View Post
    Bl**dy H*ll

    Issue was caused by an engineer who had been trying to fix our backup solution editing our default domain policy

    Just got him to reset all the things he changed and we are back to normal.

    Thanks for all the replies.

    Time for a coffee.....
    I imagine then it was something to do with the fact he may of changed the 'allow logon locally' policy and removed 'Domain Users' or/ 'Everyone' group from the list.

    at least your backup and running!! nice one!

    Enjoy your Coffee!

    James.

  11. #11

    Domino's Avatar
    Join Date
    Oct 2006
    Location
    Bromley
    Posts
    4,127
    Thank Post
    217
    Thanked 1,322 Times in 812 Posts
    Blog Entries
    4
    Rep Power
    518
    Quote Originally Posted by kennysarmy View Post
    Bl**dy H*ll

    Issue was caused by an engineer who had been trying to fix our backup solution editing our default domain policy

    Just got him to reset all the things he changed and we are back to normal.

    Thanks for all the replies.

    Time for a coffee.....
    :-O

    I hope you'll be fetching the hammer of re-education then.....

  12. #12

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,599
    Thank Post
    725
    Thanked 1,685 Times in 1,500 Posts
    Rep Power
    432
    Find that engineer and pin him against the wall, wth was he doing editing your default domain policy?

    Ben

  13. #13

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,265
    Thank Post
    242
    Thanked 1,575 Times in 1,254 Posts
    Rep Power
    341
    I agree it is a bit strange they were editing the Default Domain Policy, but there you go, another lesson learnt

SHARE:
+ Post New Thread

Similar Threads

  1. [Ubuntu] Log in to windows Domain
    By marekbrad in forum *nix
    Replies: 4
    Last Post: 28th January 2011, 09:49 AM
  2. can parent domain users log into a sub domain
    By eastofsmeg in forum Wireless Networks
    Replies: 15
    Last Post: 27th January 2010, 03:04 PM
  3. Domain Local Admins - Does not have admin rights
    By dhoward_westexetc in forum Windows
    Replies: 2
    Last Post: 7th July 2008, 10:43 AM
  4. Can log on Local can't log on to domain
    By speckytecky in forum Network and Classroom Management
    Replies: 16
    Last Post: 25th April 2008, 12:05 PM
  5. admins and domain admins
    By browolf in forum Windows
    Replies: 25
    Last Post: 1st November 2006, 03:29 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •