Asked By
Faith West
200 points
N/A
Posted on - 06/14/2011
Hi,
My computers are configured to allow Remote Desktop Connections. I am trying to log on via Remote Desktop Connection to one of my computers. The connection is established and I receive the log in window.
I however cannot log in.
When I fill in the user name and password, I get an error which says that the local policy of this system does not allow interactive you to log on interactively.
I have tried to log on using several different user accounts and I tried logging on from more than one computer on my network, but I keep getting the same error message on all computers. Please solve this.
Thanks!
Error message below:
Logon Message
The local policy of this system does not permit you to logon interactively.
OK
Local log on policy prohibits interactive logon
Hello,
This error you are having occurs because the user account trying to access is not a member of the local Remote Desktop user group. What you can do is add the user to the user group:
-
Click Start then go to Settings then go to Control Panel.
-
Go to System then on the Remote tab, find Select Remote Users and then click it.
-
Click Add type in the user account name then OK.
-
To add more than one user, just put a semi colon in between the names.
You should also make sure there are sufficient privileges so that the user can log in:
-
Go to Start then Run.
-
In Run type secpol.msc and click OK.
-
Go to Local Policies then User Right Assignment.
-
Look at the right side and double click Allow logon through Terminal Services and make sure the Remote Desktop User Group is listed.
-
Click OK.
Answered By
Brooke1
0 points
N/A
#124842
Local log on policy prohibits interactive logon
Hi Faith West,
This problem appears mostly when you try to add some group or domain user to some denial login policy. All those users who are members and associated with these groups cannot log on to the system.
And whenever a user try to log on to such system the error message appeared as you have mentioned. Another possibility could be that the administrator of the system may also be a member of the same restricted group.
To resolve the issue, if the current administrator also couldn’t logon to the system, use any other client on the LAN and then login as an administrator account, run the Ntrights.exe file from the MS Windows 2000 Kit to remove a user.
To execute this operation use this syntax as it is (case sensitive)
ntrights -m \computer -u group or user to remove -r SeDenyInteractiveLogonRight
