Interactive Logon Privilege Has Been Disabled...

[nghiaharvey]

i joined the virtual computer to the domain and I added the domain user as an administrator. but the user still cant' logon on with his user name and domain password. get this message "your interactive logon privilege has been disabled. Please contact your system administrator." Is this something I fix locally?

 

[hang-the-9]

You may need to look at the AD user account to check if the user is only allowed access to certain computers, or if the computer has policies set to prevent logon.

On the computer, check group policy in "windows settings - security settings - local policies - user rights assignment".

 

[nghiaharvey]

what am i looking for in the user rights assignment? thanks

 

[hang-the-9]

what am i looking for in the user rights assignment? thanks

Anything with logon in the title. Deny Logon Locally would be a good one to check.