+ Post New Thread
Results 1 to 7 of 7
Wireless Networks Thread, WSUS + Client Login.... in Technical; Have installed WSUS (all seemed ok). Added all computers into a organisational unit (which i have added the WSUS policy ...
  1. #1

    Join Date
    Jan 2006
    Posts
    3
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    WSUS + Client Login....

    Have installed WSUS (all seemed ok).

    Added all computers into a organisational unit (which i have added the WSUS policy too).

    None of the computers are able to login, they all give this error "The Local Policy of This System Does Not Permit You to Logon Interactively" when logging in as a user. I guess that some permissions are incorrect somewhere!


    Any pointers?
    Thanks,
    Andy

  2. #2
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    35

    Re: WSUS + Client Login....

    First of all, try moving one of the computer accounts out of your new OU and back to wherever it came from. Reboot the PC a few times (so that policy gets applied) and test logon as a user. If logon is OK, then it must be to do with the policy applied on the OU. Use Group Policy Management Console (GPMC) RSoP feature to show all the policies that apply to computers in the OU. This should show where the policy is coming from.

    IIRC there is a user 'right' called 'log on interactively). I think this would be controlled by a policy under Computer Configuration, Windows Settings, Security, User Rights (or similar).

    Hope this helps.

  3. #3

    Join Date
    Jan 2006
    Posts
    3
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: WSUS + Client Login....

    I moved the computer out of the OU (back to 'computers') and it logged on fine but my guess is the policy isn't being applied?

    The users are under the policy (which includes the WSUS) but i think the actual PCs need to be?

  4. #4
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    35

    Re: WSUS + Client Login....

    You are correct - It is the computer accounts which need the policy applying. Whereabouts did you create the OU (as in what is the OUs parent object)?

    I'm guessing that you've ony just started with OUs. If so, there is a thread somewhere on the site relating to suggested OU structure. It might be worth a look to see how other people have structured their OUs.

  5. #5

    Join Date
    Jan 2006
    Posts
    3
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: WSUS + Client Login....

    it is an "inherited" setup, plus im only a techie.... NWM has his own thoughts


    -default OU (here is the policy)
    - Staff
    - Computers


    I think it should be more like

    -default ou (nothing applied)
    - Staff (user restriction policy applied)
    - Computers (pc restrictions + software installes applied)

  6. #6
    Guest

    Re: WSUS + Client Login....

    Quote Originally Posted by techie
    I think it should be more like

    -default ou (nothing applied)
    - Staff (user restriction policy applied)
    - Computers (pc restrictions + software installes applied)
    Hit the nail on the head.

    I have a setup like the above.

    -User OU (Global User GPOs)
    -------Staff OU (Staff User GPOs)
    -------Pupil OU (Pupil User GPOs)

    -Computer OU (Global PC GPOs) eg WUSU
    -------Room 1 OU
    -------Room 2 OU
    -------Laptop OU

    You get the idea

  7. #7

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,850
    Thank Post
    110
    Thanked 598 Times in 514 Posts
    Blog Entries
    1
    Rep Power
    227

    Re: WSUS + Client Login....

    However I have my WSUS settings GPO in the default UO. Only because there are user and computer settings. Otherwise I'd need two GPOs to acomplish the same thing and more GPOs = slower machine startup/user login.

    The only other thing I do is alter the default domain controller GPO and set WSUS to download and notify rather than download and install like I have everywhere else.



SHARE:
+ Post New Thread

Similar Threads

  1. WSUS 3 - Client connection problems
    By Aeropars in forum Windows
    Replies: 15
    Last Post: 7th December 2007, 03:57 PM
  2. Pre-Login Messaeg
    By tscnmuk in forum General Chat
    Replies: 27
    Last Post: 16th August 2007, 12:44 PM
  3. Replies: 6
    Last Post: 11th July 2007, 04:32 PM
  4. Replies: 1
    Last Post: 8th November 2006, 10:57 AM
  5. WSUS vs slipstreamed updates for RIS client builds
    By ITWombat in forum How do you do....it?
    Replies: 1
    Last Post: 30th June 2006, 07:53 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •