Interactive logon privilege disabled

Set up XP Pro host. While "jdoe" islogged in locally, I
am trying to connect to workstation by establishing VPN
to network, then RDP to host computer. When I try to
logon as "jdoe", i get 'Your interactive logon privilege
has been disabled.' I CAN login using another allowed
username. However, I want jdoe to be able to logon,
whether in fornt of PCC, or connecting remotely. If
local user logs off, then I try RDP using her login name,
I get same error mesage.

Help!

This error means that the account you're using is missing
a requirement to be able to use Remote Desktop.

The account you try to log in with must have the
following:

A password.

Be a member of the Administrators OR Remote Desktop Users
group

OR

Have the "Allow Login through Terminal Services" user
right.

You can check the third (the right) by
opening "gpedit.msc", and expanding Computer
Configuration->Windows Settings->Security Settings->Local
Policies->User Rights Assignment. The "Allow Login
through Terminal Services" right will be on the right-
hand pane, double-click it and add this account.

>-----Original Message-----
>Set up XP Pro host. While "jdoe" islogged in locally, I
>am trying to connect to workstation by establishing VPN
>to network, then RDP to host computer. When I try to
>logon as "jdoe", i get 'Your interactive logon privilege
>has been disabled.' I CAN login using another allowed
>username. However, I want jdoe to be able to logon,
>whether in fornt of PCC, or connecting remotely. If
>local user logs off, then I try RDP using her login

name,

>I get same error mesage.
>
>Help!
>.
>

I am seeing this identical thing. Here's more of my situation. Any
comments?

Windows 2000 SBS, no special security policy's applied or anything.
Domain account is added to the "Remote Desktop" group by XP, on the XP
box. I can go in and confirm it's there through MMC/Local Users and
Groups, but XP is adding it.

Yet, I get the "Your interactive logon privilege has been disabled..."

But, when I sign on as domain administrator, it works.

I've checked the local right and administrators and Remote Desktop are
supposed to be able to. Yet, something from the domain is squashing
it. I have two computers that were reloade two weeks ago doing it, as
well as as OEM Dell laptop.

Nathan

"David Jones" <kk7gw@yahoo.com> wrote in message news:<08c401c34c8d$fe3016d0$a001280a@phx.gbl>...

> This error means that the account you're using is missing
> a requirement to be able to use Remote Desktop.
>
> The account you try to log in with must have the
> following:
>
> A password.
>
> Be a member of the Administrators OR Remote Desktop Users
> group
>
> OR
>
> Have the "Allow Login through Terminal Services" user
> right.
>
> You can check the third (the right) by
> opening "gpedit.msc", and expanding Computer
> Configuration->Windows Settings->Security Settings->Local
> Policies->User Rights Assignment. The "Allow Login
> through Terminal Services" right will be on the right-
> hand pane, double-click it and add this account.
>

> name,

Not a bad idea. I've thought of trying it but never did. In answer to your
question, I'm using domain users. The Remote Desktop Users group shows
"DDDD\nmaxwell" where DDDD is the domain name.

I'll try the local user thing. I'm betting it will work, with all the XP
machines being so consistent, they've got to be picking up some sort of
policy from the domain controller . . .

Nathan

"David Jones" <kk7gw@yahoo.com> wrote in message
news:02b201c34d77$e2a97830$a501280a@phx.gbl...

> Are you using local users or domain users?
> For grins, what happens if you create a local user on the
> XP machine (/not/ a domain user), add it to the
> appropriate local groups, etc, and try using that account?
>
>
>

> saying alot,

> someone else's

> Please contact

> Dell server.

> with XP

> (both the

> \\servername\tsclient and the RDP

> Administrators

> were added to

> Remote ... and

> Login through

> the domain

>machines being so consistent, they've got to be picking
up some sort of

>policy from the domain controller . . .

That's my next thought also. You may want to check the
domain security policy on the SBS box and see if there's
something there you can change.

You also may want to ask this on the SBS2000 newsgroup,
they might have other ideas.

>

>Nathan
>
>"David Jones" <kk7gw@yahoo.com> wrote in message
>news:02b201c34d77$e2a97830$a501280a@phx.gbl...

the

account?

that's

RDP

local

they

Allow

use

>
>
>.
>

Scenario: numerous WinXP Pro clients on an SBS 2K domain. If I try to connect from the Server to any WinXP Pro client using RDC and using the user's login credentials I get the "interactive logon privilege has been disabled. Please contact your system administrator" message. If I try using the domain administrator credentials it works

1. The domain user is a member of the local Remote Desktop Users account on the client P
2. The domain user is a member of the local Administrators group on the client P
3. The domain user is "enabled" for Terminal Services logon in the AD on the domain controlle
4. Administrators and Remote Desktop Users groups are enabled for Terminal Services access on the client P

Can anyone think of any other settings I need to look at to get this to work. Ultimately I can access the PC using the Administrator's account but in certain circumstances I need to log on as the user; for example when trying to determine what has gone wrong with their Outlook profile

Many thank

Gerr

You forgot the Dialin tab in AD Users and Computers

Patrick J Burwell
Support Analyst

thanks for the reply, Patrick

Dialin is actually already enabled for this particular user

Anyone with any other thoughts

many thank
Gerry