Re: "You cannot log on because the logon method you are using is not allowed on this computer"

"aconti" <> wrote in message news:...
>
> This is therror I am getting when I try to log in on the DC with a user
> which is not a member of the Domain Admin group. If I log in with the
> domain Administrator user and assign the domain admin group to the user
> it logs in normally. I have tried to create a different group but still
> the same.

The user needs to be in the domain admin group. It is a domain controller. Why would you want a non-admin to log on to a domain controller?

Is this a Terminal Server in Application mode? If this is the case, in order to allow a non-domain admin account to logon on to a Terminal Server, the account would need to be in the Terminal Services group, have Log on Locally rights, as well as Log On Interactive rights.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer


For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

"Efficiency is doing things right; effectiveness is doing the right things." - Peter F. Drucker
http://twitter.com/acefekay

Latest training from Microsoft suggests using a basic user account to log on to DC then run as administrator any tools.

Moby