Microsoft KB Archive/285793

= Error Message: The Local Policy of This System Does Not Permit You to Logon Interactively =

Article ID: 285793

Article Last Modified on 3/1/2007

-

APPLIES TO


 * Microsoft Windows 2000 Professional Edition
 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Advanced Server

-



This article was previously published under Q285793



SYMPTOMS
When you try to log on to the domain or your local computer, you may receive the following error message:

The local policy of this system does not permit you to logon interactively



CAUSE
This issue may occur if the &quot;Deny logon locally&quot; policy is set on your computer.



RESOLUTION
To resolve this issue, create an organizational unit for computers that you want to exclude from the &quot;Deny logon locally&quot; policy, and then grant the &quot;Log on locally&quot; policy to individual users or groups in the organizational unit:  Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers. Right-click the domain name, point to New, and then click Organizational Unit. Type the name of the new Organizational Unit, and then click OK. For example, you might type MyTestOU . Put the computers to which you want to grant the Logon Locally right in the Organizational Unit that you created in step 3:  Click the container that contains the computer or computers that you want to move. Select the computers, right-click the computers, and then click Move.</li> In the Move dialog box, click the organizational unit that you created in step 3, and then click OK.</li></ol> </li> Right-click the organizational unit, and then click Properties.</li> Click the Group Policy tab, click New, type the Group Policy Object name, and then click Edit.</li> Under Computer Configuration, expand Windows Settings, expand Security Settings, expand Local Policies, and then click User Rights Assignment.</li> In the right pane of the Group Policy dialog box, right-click Log on locally, and then click Security.</li> Click to select the Define these policy settings check box, click Add, and then click Browse.</li> Click those users to whom you want to grant the &quot;Log on locally&quot; policy, click Add, and then click OK two times. To select multiple users or groups, press and hold the CTRL key down, and then click individual objects.</li> Click OK to close the Security Policy Setting dialog box.</li></ol>

Keywords: kbprb KB285793

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.