The Local Policy Of This System Does Not Permit You To Logon Interactively

I've been really getting into Media Portal the past month or two and have been running it on a Windows Server 2003 box (yes, I watch TV on the same server that hosts this blog!).  The problem has been that I have been running on my admin account which grants the user of Media Portal to accidentally (or intentionally) delete files from the UI.  I decided this is a bad thing since my two year old has proven quite adept at getting into menus that he's not suppose to be using, so I thought it time to setup some users and groups for specifically using Media Portal.

First I setup a Media Portal user account and setup media consumer and admin groups.  I placed the Media Portal user account in the consumers group and gave them read/write (not NOT delete) capabilities on my media folders.  Once I got that setup, I discovered that I could not login with that account.  I received the following error:

The local policy of this system does not permit you to logon interactively.

This proved an interesting problem since I had attempted to circumvent this by adding the Media Portal user to the Remote Desktop Users  group with no avail.  So how did I get it done?

  1. Download the Windows Server 2003 Resource Kit Tools from Microsoft.
  2. Install it and you'll find it in All Programs --> Windows Resource Kit Tools --> Command Shell.  This will open up a command prompt to the directory.
  3. Type the following (it is case sensitive): ntrights +r SeInteractiveLogonRight -u username
  4. Make sure that the command finished successfully.
  5. Type the following command to make sure that the group policy is updated properly: gpudate /force

With that the user should now have rights to logon to your box!

Posted on Dec 26
Written by Wayne Hartman