logon in 2k3 server

[Wasim]

hi, i have created a new user in windows 2k3 server however i get an error saying the user can not logon interactively. i have checked the security policies and there is non enabled for interavtive logons.

what need to be done?

[tarquel]

Not 100% sure what you mean here.

Do you mean that the new user cannot log on to the server, or a client machine?

Are you using Active Directory (AD) and also, what are the client machines that you are using?

You need to give a bit more info please

Regards

N.

[Wasim]

no logging on the server machine, i have no client machines set up. yes and astive directory is installed and in place

[tarquel]

hmmm...

Its a funny one this as I'm the only person here who maintains & runs the system so I've never needed anyone else to be able to logon to the server.

One quick thought is that the new user would need sufficient rights to do so and would probably need to be in the Domain Admins group, if not the Administrators group..

But my thinking cap is on in case this dont help.

Regards,

N.

[Wasim]

you see i want to use windows 2003 just like you use xp, should i delete the active directory and uninstall all the extras for the server, just want it as a workstation

[tarquel]

ahhh you just want it as a workstation...

I would say it might be best if you dont give it any server roles, maybe the file server one might be useful still (if you have other computers and have a local LAN setup)

I'd wager it will hog resources have these services & server roles running and obviously you dont want that when you're using it as a workstation.

Moreover, if you're gonna be surfing the net, all these additional services could be used by hackers & un-savy people so thats another big reason not to have the other roles installed and running.

Give it a try and see if that helps you user problem too

Regards,

N.

[Wasim]

yeah ok i no time on my hand at the mo, will do a fresh install and take up from there.

[tarquel]

Yep, thats probably best.

Just read that there is a guide on the MSFN about setting win 2003 up as a workstation but couldnt find a link tho.

Might be worth reading that

Regards,

N.

[FAT64]

When you create a Domain Controller (install Active Directory), normal users do not, by default, have the right to logon using the Domain Controller. You need to run the Domain Controller Security Policy tool and allow Authenticated Users the right to logon locally.

[tarquel]

Indeed...I was getting to that

But as Wasim wasnt intending to use it as a DC or usage in a domain, it wasnt worth mentioning hehe

Regards,

N.