techie

it is an "inherited" setup, plus im only a techie.... NWM has his own thoughts -default OU (here is the policy) - Staff - Computers I think it should be more like -default ou (nothing applied) - Staff (user restriction policy applied) - Computers (pc restrictions + software installes applied)

I moved the computer out of the OU (back to 'computers') and it logged on fine but my guess is the policy isn't being applied? The users are under the policy (which includes the WSUS) but i think the actual PCs need to be?

Have installed WSUS (all seemed ok). Added all computers into a organisational unit (which i have added the WSUS policy too). None of the computers are able to login, they all give this error "The Local Policy of This System Does Not Permit You to Logon Interactively" when logging in as a user. I guess that some permissions are incorrect somewhere! Any pointers? Thanks, Andy