Connecting Tech Pros Worldwide Forums | Help | Site Map

error message

Newbie
 
Join Date: Oct 2006
Posts: 1
#1: Oct 17 '06
I have given a user the right to Log on Locally to a Domain Controller. I did it through a GPO to the domain. When the user tries to log on, windows displays an error message that says "User does not have the right to log on interactively." what is my problem?

Newbie
 
Join Date: Nov 2006
Posts: 1
#2: Nov 10 '06

re: error message


HI sir,

Make that user has a member of backup operator and logon, logon will success.
Cyberdyne's Avatar
Moderator
 
Join Date: Sep 2006
Location: Los Angeles, CA
Posts: 596
#3: Nov 18 '06

re: error message


Quote:

Originally Posted by adminnewbie

I have given a user the right to Log on Locally to a Domain Controller. I did it through a GPO to the domain. When the user tries to log on, windows displays an error message that says "User does not have the right to log on interactively." what is my problem?


Local and Domain logons are distinct keep that in mind. I would create the username and then try it out myself. Usually its the group the user is in that defines his/her rights to log on.

Good Luck.
NeoPa's Avatar
Administrator
 
Join Date: Oct 2006
Location: London - UK
Posts: 15,722
#4: Nov 18 '06

re: error message


Quote:

Originally Posted by Cyberdyne

Local and Domain logons are distinct keep that in mind. I would create the username and then try it out myself. Usually its the group the user is in that defines his/her rights to log on.

Good Luck.

They are distinct except on DCs (Domain Controllers).
The rest of the advice is good - it's much easier to manage domain security using groups than individual users, but be aware, in most cases (not this one) when you've added a user to a group they will need to log out then in again before the system recognises their new rights.

Only add a user to the 'Backup Operators' group if you really don't care about security. It's a bit like making them God in most setups.
Reply