I have just set up a user account for a member of staff but when she logs on she gets the message"the local policy of this system does not permit you to logon interactively"

Any ideas how to fix before i show myself up by asking a member of staff?

 

Have you given her the correct ( or any) login script to her account ?

Does this happen if u log in as her on your pc ??

 

No login script

She has gone for dinner now it maybe that she or anyone in her team are not allowed to log on to the server, not sure what the server name is yet. I only reset the odd password and set up some accounts when other teams are busy so AD is all new to me.

 

no one apart from Administrators are allowed to log on to the Server directly... when you said Server did you mean domain?

 

No she can logon to servers but has limited rights, she is part of a test team

 

what security groups are on the servers? Can you add her into the local admin groups on one of the servers. Is domain users in the users group??

could create a security group called "test-serv" for example, add her into that group and add that group into the local users group on the server.

unless its a domain controller of course

 

Am starting to think I do not fully understand what you are trying to do here!!

What I think or thought the situation is :-
This is a completely new user, who logs into her workstation with
username/password/domain .... and the error appears when she logs into a workstation... is this correct ?

 

If I were you, I would check with your heads of IT, that they will in fact allow her and her team to do this.
It does not sound like this has been thought out by her(and maybe her team) properly.
I have been caught out by project teams like this before, they just say they want want want, and do not go through correct channels, and say things like "oh thats too slow, we want it now"

this makes me query it even more.

 

Sorry should have made myself clear she is trying log on to a server via RDP from her desktop machine.

 

her account not a member of the remote desktop group which needs to be added to the 'allow logon through terminal services' in the local security settings.

 

Cheers will have a look at that

 

but basically adding her to the administrators group will give her the rights