JSI Tip 3133. Users cannot log on to the Windows 2000 domain?

If your users cannot log on to the domain, you may have removed the Access This Computer from the Network User Right from the Everyone group and did NOT replace it with the appropriate user or group accounts.

If you want to remove the Everyone group from the Access This Computer from the Network User Right, you should have replaced it with:

Authenticated Users
Enterprise Domain Controllers
System
Administrators.

See tip 3132.