+ Post New Thread
Results 1 to 13 of 13
Windows Thread, URGENT help please : only domain admins can log on :( across whole site... in Technical; Everyone else gets the error: "the local policy of this system does not allow you to log on interactively" Apparently ...
  1. #1
    kennysarmy's Avatar
    Join Date
    Oct 2005
    Location
    UK
    Posts
    1,286
    Thank Post
    80
    Thanked 45 Times in 31 Posts
    Rep Power
    31

    URGENT help please : only domain admins can log on :( across whole site...

    Everyone else gets the error:

    "the local policy of this system does not allow you to log on interactively"

    Apparently there was a power cut in the holidays and I've come in to bedlam...

    Any ideas?

  2. #2

    EduTech's Avatar
    Join Date
    Aug 2007
    Location
    Reading
    Posts
    5,063
    Thank Post
    160
    Thanked 920 Times in 723 Posts
    Blog Entries
    3
    Rep Power
    272
    Check this, although i think it is unlikely to be so as it don't change on its own

    • Start the Active Directory Users and Computers snap-in.
    • Right-click the domain and click Properties.
    • Click Group Policy.
    • Double-click Default Domain Policy.
    • Click Computer Configuration, click Windows Settings, and then click Security Settings.
    • Click Local Policies, click User Rights Assignments, and then click Log on Locally.

    NOTE: Only the users that are in the list for this user right should have the right to log on locally to domain member computers.
    Add Domain Users or Everyone or undefine the policy (which is the default setting).

    Source: Error Message&#58 The Local Policy of This System Does Not Allow You to Log On Interactively

    also,

    http://answers.microsoft.com/en-us/w...a-455b7c82ef0f

    James.
    Last edited by EduTech; 26th April 2011 at 09:12 AM.

  3. #3

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    10,400
    Thank Post
    602
    Thanked 2,171 Times in 994 Posts
    Blog Entries
    23
    Rep Power
    630
    Hmm. If there was a powercut it may be prudent to shut down the server room and reboot everything in order. From the router, switches then servers in order of roles (DC's first etc.). Yes, there will be complaints as this may take up to half an hour depending on the size of your network, but if server replications have been messed around with it will save time in the long run as at leat you know that all the servers have started in the correct order and you will be able to use the logs better for fault finding. It's better than having no network at all!! Oh, and check the date/time on your servers as well once they come back up.

  4. #4

    Join Date
    Dec 2008
    Location
    Essex
    Posts
    2,144
    Thank Post
    1
    Thanked 326 Times in 316 Posts
    Rep Power
    77
    I would check what James has suggested, also, for any other GPO's that you may have applied at the OU level, i.e if you have a OU for computers/laptops etc...

    If the issue still remains, get results from gpresult and post here.

    Sukh

  5. #5

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,810
    Thank Post
    272
    Thanked 1,135 Times in 1,031 Posts
    Rep Power
    349
    I doubt the gpo would be changed by a powercut - i would do what DOS_BOX has suggested personally.

  6. #6

    EduTech's Avatar
    Join Date
    Aug 2007
    Location
    Reading
    Posts
    5,063
    Thank Post
    160
    Thanked 920 Times in 723 Posts
    Blog Entries
    3
    Rep Power
    272
    Quote Originally Posted by glennda View Post
    I doubt the gpo would be changed by a powercut - i would do what DOS_BOX has suggested personally.
    I suggested it, because 1) I don't know if someone has been making any changes over the course of the holiday period and 2) if someone has changed it by accident it may not of became apparent until the whole system has gone down and come back up (wrong).

    I agree with you, that it is unlikely a power cut to change a GPO because that would just be madness and crazy and well anyone who thought that should be... well i won't say - agreed that you should reboot everything i assumed that it may of already done tbh.

    James.

  7. #7
    kennysarmy's Avatar
    Join Date
    Oct 2005
    Location
    UK
    Posts
    1,286
    Thank Post
    80
    Thanked 45 Times in 31 Posts
    Rep Power
    31
    On to something - thanks

  8. #8
    zag
    zag is offline
    zag's Avatar
    Join Date
    Mar 2007
    Posts
    3,766
    Thank Post
    899
    Thanked 417 Times in 350 Posts
    Blog Entries
    12
    Rep Power
    87
    Make a new user in a new OU with a new group policy and see if it works.

    If it does then it may be something to do with a corrupt group policy.

  9. #9
    kennysarmy's Avatar
    Join Date
    Oct 2005
    Location
    UK
    Posts
    1,286
    Thank Post
    80
    Thanked 45 Times in 31 Posts
    Rep Power
    31
    Bl**dy H*ll

    Issue was caused by an engineer who had been trying to fix our backup solution editing our default domain policy

    Just got him to reset all the things he changed and we are back to normal.

    Thanks for all the replies.

    Time for a coffee.....

  10. #10

    EduTech's Avatar
    Join Date
    Aug 2007
    Location
    Reading
    Posts
    5,063
    Thank Post
    160
    Thanked 920 Times in 723 Posts
    Blog Entries
    3
    Rep Power
    272
    Quote Originally Posted by kennysarmy View Post
    Bl**dy H*ll

    Issue was caused by an engineer who had been trying to fix our backup solution editing our default domain policy

    Just got him to reset all the things he changed and we are back to normal.

    Thanks for all the replies.

    Time for a coffee.....
    I imagine then it was something to do with the fact he may of changed the 'allow logon locally' policy and removed 'Domain Users' or/ 'Everyone' group from the list.

    at least your backup and running!! nice one!

    Enjoy your Coffee!

    James.

  11. #11

    Domino's Avatar
    Join Date
    Oct 2006
    Location
    Bromley
    Posts
    4,156
    Thank Post
    215
    Thanked 1,260 Times in 791 Posts
    Blog Entries
    4
    Rep Power
    507
    Quote Originally Posted by kennysarmy View Post
    Bl**dy H*ll

    Issue was caused by an engineer who had been trying to fix our backup solution editing our default domain policy

    Just got him to reset all the things he changed and we are back to normal.

    Thanks for all the replies.

    Time for a coffee.....
    :-O

    I hope you'll be fetching the hammer of re-education then.....

  12. #12

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,618
    Thank Post
    648
    Thanked 1,619 Times in 1,449 Posts
    Rep Power
    421
    Find that engineer and pin him against the wall, wth was he doing editing your default domain policy?

    Ben

  13. #13

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,568 Times in 1,250 Posts
    Rep Power
    340
    I agree it is a bit strange they were editing the Default Domain Policy, but there you go, another lesson learnt

SHARE:
+ Post New Thread

Similar Threads

  1. [Ubuntu] Log in to windows Domain
    By marekbrad in forum *nix
    Replies: 4
    Last Post: 28th January 2011, 09:49 AM
  2. can parent domain users log into a sub domain
    By eastofsmeg in forum Wireless Networks
    Replies: 15
    Last Post: 27th January 2010, 03:04 PM
  3. Domain Local Admins - Does not have admin rights
    By dhoward_westexetc in forum Windows
    Replies: 2
    Last Post: 7th July 2008, 10:43 AM
  4. Can log on Local can't log on to domain
    By speckytecky in forum Network and Classroom Management
    Replies: 16
    Last Post: 25th April 2008, 12:05 PM
  5. admins and domain admins
    By browolf in forum Windows
    Replies: 25
    Last Post: 1st November 2006, 03:29 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •