Article ID: 285793 - Last Review: March 1, 2007 - Revision: 2.4

Error Message: The Local Policy of This System Does Not Permit You to Logon Interactively

View products that this article applies to.
System TipThis article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.
This article was previously published under Q285793
Notice
This article applies to Windows 2000. Support for Windows 2000 ends on July 13, 2010. The Windows 2000 End-of-Support Solution Center (http://support.microsoft.com/?scid=http%3a%2f%2fsupport.microsoft.com%2fwin2000) is a starting point for planning your migration strategy from Windows 2000. For more information see the Microsoft Support Lifecycle Policy (http://support.microsoft.com/lifecycle/) .
Expand all | Collapse all

SYMPTOMS

When you try to log on to the domain or your local computer, you may receive the following error message:
The local policy of this system does not permit you to logon interactively
Back to the top

CAUSE

This issue may occur if the "Deny logon locally" policy is set on your computer.
Back to the top

RESOLUTION

To resolve this issue, create an organizational unit for computers that you want to exclude from the "Deny logon locally" policy, and then grant the "Log on locally" policy to individual users or groups in the organizational unit:
  1. Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
  2. Right-click the domain name, point to New, and then click Organizational Unit.
  3. Type the name of the new Organizational Unit, and then click OK. For example, you might type MyTestOU.
  4. Put the computers to which you want to grant the Logon Locally right in the Organizational Unit that you created in step 3:
    1. Click the container that contains the computer or computers that you want to move.
    2. Select the computers, right-click the computers, and then click Move.
    3. In the Move dialog box, click the organizational unit that you created in step 3, and then click OK.
  5. Right-click the organizational unit, and then click Properties.
  6. Click the Group Policy tab, click New, type the Group Policy Object name, and then click Edit.
  7. Under Computer Configuration, expand Windows Settings, expand Security Settings, expand Local Policies, and then click User Rights Assignment.
  8. In the right pane of the Group Policy dialog box, right-click Log on locally, and then click Security.
  9. Click to select the Define these policy settings check box, click Add, and then click Browse.
  10. Click those users to whom you want to grant the "Log on locally" policy, click Add, and then click OK two times. To select multiple users or groups, press and hold the CTRL key down, and then click individual objects.
  11. Click OK to close the Security Policy Setting dialog box.
Back to the top
APPLIES TO
  • Microsoft Windows 2000 Professional Edition
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
Back to the top
Keywords: 
kbprb KB285793
Back to the top