My active directory (SBS 2003) domain users cannot log on locally to a given client machine (XP SP3). Logon with the domain admin works.
I would like users to be able to logon locally to this computer, so I'm trying to find out where the restriction is set. For this I locally start rsop.msc
and navigate to
Console Root / <ComputerName> / Computer Configuration / Windows Settings / Security Settings / Local Policies / User Rights Assignment
Here I would like to view the "Allow logon locally" policy, but it is missing.
I have many (all?) other policies, including "Deny logon locally" and "Allow logon through Terminal Services".
Why is "Allow logon locally" missing and how can I restore it?
Best Answer
The keyboard layout was not set correctly (duh!). So the users could not log in.
I still don't know why the "Allow logon locally" policy is not available (while all other policies are available), but my problem is solved by changing the keyboard layout.