Cannot log on to local machines

My xp client machine is in a Win2k AD domain. I cannot log on
users. I can log on Admins Error message says "local security policy does not permit you to logon interactively". When I go to the local policy
only the administrators group is allowed on Logon Locally
policy. This cannot be changed even if I am the local
admin on the machine signed on locally. I checked all the
group policies on the Domain Controller and nothing is
configured to deny users to logon locally to their
machines. All GP's are not configured for Logon locally or
Deny logon locally. Please help.

 

I seemed to have fixed something here. I ran recovery console on XP machine and restored default local security and then rejoined the domain. Now users can log in with their policies intact from the DC. I just dont know why this was happening in the first place. Any clues?

 

microsoft has a fix for that problum but they say to only use it if you have no other way around the problum the next time you get an error report follow the link . i had the same problum today when i had to reset the router and computers.you need to go directly to the shared folder to make any changes. i would hate to see what the fix fu..s up.

 

Yeah, I hate fixes when I dont know what is happening. I would like to do everything manually as possible when it comes to fixing errors like this. I still may never know what fixes have done to me to this day.