In order to change this, you will need to alter the "Default Domain Controller" GPO that is created by default. I do not recommend this though. You mention that you created "Local machine" users... If you did this before DCPromo, they are now Domain Users, if you did it after DCPromo, I'd love to know how, since the Local Users and Groups snap-in does not connect to a Domain Controller. If you used Active Directory Users and Computers to create them, they are domain users. In other words, Domain Controllers, for all intents and purposes (excepting Directory Restore/Recovery Console access, when the "original" local Administrator account is used) have no local users or groups. Hope this helps, Glenn Sullivan, MCSE+I MCDBA David Clark Company Inc. -----Original Message----- From: shafik shifa [mailto:shafikshifa@xxxxxxxxx] Sent: Wednesday, February 26, 2003 5:27 AM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] does not permit you to log on interactively i have newly installed and configured my domain controller but the problems it that i can not log in with any ohter users which i created in active directory (local machine) it gives me the following error (The Local policy of this system does not permit you to log on interactively ) what is your ideas ? shifa shafik Kabul Afghanistan --------------------------------- Do you Yahoo!? Yahoo! Tax Center - forms, calculators, tips, and more ********************************************************* This Week's Sponsor - Neoware Now through March 31, 2003 Neoware is offering a Capio 500/Eon Proven 2100 for $299! Click the link below: http://www.neoware.com/promocp4a/thinnetban.html ********************************************************** ================================== To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm ********************************************************* This Week's Sponsor - Neoware Now through March 31, 2003 Neoware is offering a Capio 500/Eon Proven 2100 for $299! Click the link below: http://www.neoware.com/promocp4a/thinnetban.html ********************************************************** ================================== To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm