Microsoft KB Archive/276580

= Non-Domain Users Cannot Log On Locally or Interactively to Domain Members =

Article ID: 276580

Article Last Modified on 2/28/2007

-

APPLIES TO


 * Microsoft Windows 2000 Service Pack 1
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Service Pack 1

-



This article was previously published under Q276580



SYMPTOMS
On a Windows 2000-based domain member, when you try to log on as a local administrator or as any other local user, you may not be able to log on and you may receive the following error message:

The Local policy of this system does not permit you to log on interactively.

Logging on as a domain user or a domain administrator works correctly.



CAUSE
This behavior can occur for any of the following reasons:
 * A Group Policy object (GPO) is configured with the &quot;Log on Locally&quot; policy at the domain, site, or organizational unit level. The policy has the Domain Users group or groups with only domain users defined, but does not have the Everyone special group defined.
 * The local policy on the member computer has the same GPO defined with the Domain Users group or groups with only domain users defined, but does not have the Everyone special group defined.



RESOLUTION
In the policy that is defined at the domain, site, or organizational unit level, add the Everyone group to the list of users and groups that are defined in the &quot;Log on Locally&quot; policy, or change the &quot;Log on Locally&quot; policy to &quot;Not configured.&quot;

Keywords: kbprb kbgpo KB276580

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.