logon interactively

[Mehrany]

سلام . من زمانی که کاربرهای جدید را عضو گروه power user می کنم تا دسترسی ادمین را نداشته باشن ، موقع لاگین کردن این خطا را میده :
the local policy of the system does not permit you to logon inter actively .
چرا ؟ باید چه کار کنم ؟؟؟؟؟؟؟؟؟؟؟؟؟؟؟؟ چه گروه های دسترسی logon interactively را دارند ؟؟؟؟

در حالیکه با گروه backup operator اجازه لاگین میده . چرا ؟؟؟؟؟؟؟؟؟؟؟

---

موضوعات مشابه:

• فرق Login با Logon
• نمایش یک Logon Message قدیمی برای برخی از کاربران
• There are currently no logon servers available
• So you have a slow logon
• The local policy of this system does not permit you to logon interactively .

---

[patris1]

http://support.microsoft.com/?scid=kb%3Ben-us%3B276590&x=20&y=14

Error Message: The Local Policy of This System Does Not Permit You to Log on Interactively

When you add a group, such as, Domain Users, Everyone, or Authenticated Users, to the "Deny Logon Locally" user right, users that are members of those groups can no longer log on to certain computers. When a user tries to log on to the computer, the user may receive the following error message:

The Local policy of this system does not permit you to log on interactively.

The administrator of your system may find this behavior to be unexpected.

This behavior may occur because the user (such as, the administrator, who is a member of a group that has been explicitly granted the "Logon Locally" user right) may also be a member of the preceding groups. Any of the preceding groups may deny users access to the computer in which case a policy that sets the denial of user rights takes precedence over a policy that enables user rights.

To work around this behavior, you can access the computer that is denying a user access by means of an administrative account situated on another client. Then you can use the Ntrights.exe program from the Microsoft Windows 2000 Resource Kit to remove the user from the "Deny Logon Locally" user right.

To perform this procedure, use the following (case-sensitive) syntax:
ntrights -m \\computer -u group or user to remove -r SeDenyInteractiveLogonRight

Most of the preceding problems occur when the Everyone group has been removed from the user right. You can use the Ntrights utility to add user rights.

For additional information about how to add a group back to the user right, click the article number below to view the article in the Microsoft Knowledge Base: 279664 (How to Set Logon User Rights with the Ntrights.exe Utility ) How to Set Logon User Rights with the Ntrights.exe Utility

[Mehrany]

ممنون از راهنمائیت اما من از این مطلب چیزی دستگیرم نشد اگر ممکنه به زبان فارسی هم برام توضیح بدهید .

[mmj]

خلاصش اینه که ممکنه گروه Power Users در یک Policy دیگر Deny شده و نتیجتا اعضای اون گروه موفق به Login نمی شوند.
شما policy بنام Deny log on locally رو چک کن ببین گروه مذکور هم جزوش هست یا نه؟

[Mehrany]

تشکر از راهنمائیتون . دقیقا گیر همین جا بود چون روی DC توی پالیسی allow log on locally : گروه power Users اضافه نشده بود . اما حالا ی سوال داشتم و آن اینکه میشه میزان دسترسی های این گروه را ی مقداری کم یا زیاد کرد ؟؟؟؟؟؟/