+ Post New Thread
Results 1 to 13 of 13
Windows Thread, URGENT help please : only domain admins can log on :( across whole site... in Technical; Everyone else gets the error: "the local policy of this system does not allow you to log on interactively" Apparently ...
  1. #1
    kennysarmy's Avatar
    Join Date
    Oct 2005
    Location
    UK
    Posts
    1,286
    Thank Post
    80
    Thanked 45 Times in 31 Posts
    Rep Power
    30

    URGENT help please : only domain admins can log on :( across whole site...

    Everyone else gets the error:

    "the local policy of this system does not allow you to log on interactively"

    Apparently there was a power cut in the holidays and I've come in to bedlam...

    Any ideas?

  2. #2

    EduTech's Avatar
    Join Date
    Aug 2007
    Location
    Reading
    Posts
    5,047
    Thank Post
    160
    Thanked 913 Times in 716 Posts
    Blog Entries
    3
    Rep Power
    271
    Check this, although i think it is unlikely to be so as it don't change on its own

    • Start the Active Directory Users and Computers snap-in.
    • Right-click the domain and click Properties.
    • Click Group Policy.
    • Double-click Default Domain Policy.
    • Click Computer Configuration, click Windows Settings, and then click Security Settings.
    • Click Local Policies, click User Rights Assignments, and then click Log on Locally.

    NOTE: Only the users that are in the list for this user right should have the right to log on locally to domain member computers.
    Add Domain Users or Everyone or undefine the policy (which is the default setting).

    Source: Error Message&#58 The Local Policy of This System Does Not Allow You to Log On Interactively

    also,

    http://answers.microsoft.com/en-us/w...a-455b7c82ef0f

    James.
    Last edited by EduTech; 26th April 2011 at 09:12 AM.

  3. #3

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    9,853
    Thank Post
    583
    Thanked 2,162 Times in 987 Posts
    Blog Entries
    23
    Rep Power
    627
    Hmm. If there was a powercut it may be prudent to shut down the server room and reboot everything in order. From the router, switches then servers in order of roles (DC's first etc.). Yes, there will be complaints as this may take up to half an hour depending on the size of your network, but if server replications have been messed around with it will save time in the long run as at leat you know that all the servers have started in the correct order and you will be able to use the logs better for fault finding. It's better than having no network at all!! Oh, and check the date/time on your servers as well once they come back up.

  4. #4

    Join Date
    Dec 2008
    Location
    Essex
    Posts
    2,137
    Thank Post
    1
    Thanked 326 Times in 316 Posts
    Rep Power
    77
    I would check what James has suggested, also, for any other GPO's that you may have applied at the OU level, i.e if you have a OU for computers/laptops etc...

    If the issue still remains, get results from gpresult and post here.

    Sukh

  5. #5

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,801
    Thank Post
    272
    Thanked 1,135 Times in 1,031 Posts
    Rep Power
    349
    I doubt the gpo would be changed by a powercut - i would do what DOS_BOX has suggested personally.

  6. #6

    EduTech's Avatar
    Join Date
    Aug 2007
    Location
    Reading
    Posts
    5,047
    Thank Post
    160
    Thanked 913 Times in 716 Posts
    Blog Entries
    3
    Rep Power
    271
    Quote Originally Posted by glennda View Post
    I doubt the gpo would be changed by a powercut - i would do what DOS_BOX has suggested personally.
    I suggested it, because 1) I don't know if someone has been making any changes over the course of the holiday period and 2) if someone has changed it by accident it may not of became apparent until the whole system has gone down and come back up (wrong).

    I agree with you, that it is unlikely a power cut to change a GPO because that would just be madness and crazy and well anyone who thought that should be... well i won't say - agreed that you should reboot everything i assumed that it may of already done tbh.

    James.

  7. #7
    kennysarmy's Avatar
    Join Date
    Oct 2005
    Location
    UK
    Posts
    1,286
    Thank Post
    80
    Thanked 45 Times in 31 Posts
    Rep Power
    30
    On to something - thanks

  8. #8
    zag
    zag is offline
    zag's Avatar
    Join Date
    Mar 2007
    Posts
    3,762
    Thank Post
    897
    Thanked 416 Times in 350 Posts
    Blog Entries
    12
    Rep Power
    86
    Make a new user in a new OU with a new group policy and see if it works.

    If it does then it may be something to do with a corrupt group policy.

  9. #9
    kennysarmy's Avatar
    Join Date
    Oct 2005
    Location
    UK
    Posts
    1,286
    Thank Post
    80
    Thanked 45 Times in 31 Posts
    Rep Power
    30
    Bl**dy H*ll

    Issue was caused by an engineer who had been trying to fix our backup solution editing our default domain policy

    Just got him to reset all the things he changed and we are back to normal.

    Thanks for all the replies.

    Time for a coffee.....

  10. #10

    EduTech's Avatar
    Join Date
    Aug 2007
    Location
    Reading
    Posts
    5,047
    Thank Post
    160
    Thanked 913 Times in 716 Posts
    Blog Entries
    3
    Rep Power
    271
    Quote Originally Posted by kennysarmy View Post
    Bl**dy H*ll

    Issue was caused by an engineer who had been trying to fix our backup solution editing our default domain policy

    Just got him to reset all the things he changed and we are back to normal.

    Thanks for all the replies.

    Time for a coffee.....
    I imagine then it was something to do with the fact he may of changed the 'allow logon locally' policy and removed 'Domain Users' or/ 'Everyone' group from the list.

    at least your backup and running!! nice one!

    Enjoy your Coffee!

    James.

  11. #11

    Domino's Avatar
    Join Date
    Oct 2006
    Location
    Bromley
    Posts
    4,126
    Thank Post
    215
    Thanked 1,255 Times in 786 Posts
    Blog Entries
    4
    Rep Power
    505
    Quote Originally Posted by kennysarmy View Post
    Bl**dy H*ll

    Issue was caused by an engineer who had been trying to fix our backup solution editing our default domain policy

    Just got him to reset all the things he changed and we are back to normal.

    Thanks for all the replies.

    Time for a coffee.....
    :-O

    I hope you'll be fetching the hammer of re-education then.....

  12. #12

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,343
    Thank Post
    624
    Thanked 1,584 Times in 1,421 Posts
    Rep Power
    414
    Find that engineer and pin him against the wall, wth was he doing editing your default domain policy?

    Ben

  13. #13

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,568 Times in 1,250 Posts
    Rep Power
    340
    I agree it is a bit strange they were editing the Default Domain Policy, but there you go, another lesson learnt

SHARE:
+ Post New Thread

Similar Threads

  1. [Ubuntu] Log in to windows Domain
    By marekbrad in forum *nix
    Replies: 4
    Last Post: 28th January 2011, 09:49 AM
  2. can parent domain users log into a sub domain
    By eastofsmeg in forum Wireless Networks
    Replies: 15
    Last Post: 27th January 2010, 03:04 PM
  3. Domain Local Admins - Does not have admin rights
    By dhoward_westexetc in forum Windows
    Replies: 2
    Last Post: 7th July 2008, 10:43 AM
  4. Can log on Local can't log on to domain
    By speckytecky in forum Network and Classroom Management
    Replies: 16
    Last Post: 25th April 2008, 12:05 PM
  5. admins and domain admins
    By browolf in forum Windows
    Replies: 25
    Last Post: 1st November 2006, 03:29 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •