JSI Tip 7579. You receive the 'The local policy of this system does not permit you to logon interactively'?

When you try to log on, either locally or to a domain, you receive:

The local policy of this system does not permit you to logon interactively..

Check to see if the reason is contained in one of the following tips:

Windows 2000 issues 'The local policy of this system does not permit you to logon interactively'?

You can't logon, 'The local policy of this system does not permit you to logon interactively'?

Terminal Services Clients cannot connect if Terminal Services is installed on a domain controller?

If you try to log on to the domain with Domain Admin credentials, you receive:

The system cannot log you on to this domain because the system's machine account in its primary domain is missing or the password on that account is incorrect.

If you use NETDOM to reset the secure channel to the domain controller, you receive:

The trust relationship between this workstation and the primary domain failed.

If you use Nltest.exe to test the secure channel to the domain controller, you receive:

Access denied..

It is likely that the Security hive of your computer's registry has become corrupted.

If you have a recent System State backup, do a restore.

To fix this problem without a backup:

01. Boot the Recovery Console.

02. Copy the Security file, from the Repair sub-folder of your Windows installation, to the system32\config sub-folder.

03. Type Exit and press Enter to restart your computer normally.

04. Log on to your computer locally, as Administrator. If you forgot the Administrator password, see tip 1984.

05. Right-click My Computer and press Properties.

06. Select the Network Identification tab. In Windows XP, select the Computer Name tab.

07. Press Properties. In Windows XP, press Change.

08. Select the Workgroup radial button under Member of.

09. Type WORKGROUP, or the name of a workgroup.

10. Press OK and OK.

11. Restart your computer.

12. In the Active Directory Users and Computers snap-in of another computer, delete the computer account. Wait for replication of the deletion to all domain controllers.

13. On your computer, right-click My Computer and press Properties.

14. Select the Network Identification tab. In Windows XP, select the Computer Name tab.

15. Press Properties. In Windows XP, press Change.

16. Select the Domain radial button under Member of.

17. Type the name of the domain that you wish to join and press OK.

18. When prompted, type a domain administrators user name and password.

19. Press OK and OK.

20. Restart your computer.

NOTE: See How do I recovery a lost local user profile?



Hide comments

Comments

  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
Publish