Cannot log on locally - Inetserver

Ensure user has logon locally right.
Users Cannot FTP to a Windows 2000 IIS Server, System Reports 'Access
Denied' with Event ID 100
http://support.microsoft.com/?id=285806

--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/



"Jon A Pedersen" <jon.areNOSPAM@itg.nu> wrote in message
news:#mAvz9r1EHA.804@TK2MSFTNGP12.phx.gbl...
> Users cannot log on locally to their FPT sites. They have exclusive rights
> on their own folders. The users group has read & execute, list folder
> content and read set. But still they cannot log in. Please help me on
this.
> I've included the error from the eventlog.
> Event Type: Warning
> Event Source: MSFTPSVC
> Event Category: None
> Event ID: 100
> Date: 2004-11-30
> Time: 10:27:13
> User: N/A
> Computer: WEBSERVER
> Description:
> The server was unable to logon the Windows NT account 'domain\test' due to
> the following error: Logon failure: user not allowed to log on to this
> computer. The data is the error code.
> For additional information specific to this message please visit the
> Microsoft Online Support site located at:
> http://www.microsoft.com/contentredirect.asp.
> Data:
> 0000: 31 05 00 00 1...
>
> Jon Are Pedersen
>
>

"Bernard" <qbernard@hotmail.com.discuss> wrote in message
news:%23Eyhmvs1EHA.1192@tk2msftngp13.phx.gbl...
> Ensure user has logon locally right.
> Users Cannot FTP to a Windows 2000 IIS Server, System Reports 'Access
> Denied' with Event ID 100
> http://support.microsoft.com/?id=285806
>
> --
> Regards,
> Bernard Cheah
> http://www.tryiis.com/
> http://support.microsoft.com/
> http://www.msmvps.com/bernard/
>
I have tried this & am still getting the 530 error message.
User 1 is a member of Domain Users.
I added this group, as it says to do in the article referenced above & I am
still getting the 530 error message!

I found the reason for this behavior. For me it was a limitation for which
computers users could log on to. They was restricted to their own computer
only. When I removed it everything worked fine again. OWA was also affected
by this limitation, but works fine now.
Jon Are Pedersen


"Mike" <mikey117@hotmail.com> skrev i meddelandet
news:ujogT6S4EHA.4028@TK2MSFTNGP15.phx.gbl...
>
> "Bernard" <qbernard@hotmail.com.discuss> wrote in message
> news:%23Eyhmvs1EHA.1192@tk2msftngp13.phx.gbl...
>> Ensure user has logon locally right.
>> Users Cannot FTP to a Windows 2000 IIS Server, System Reports 'Access
>> Denied' with Event ID 100
>> http://support.microsoft.com/?id=285806
>>
>> --
>> Regards,
>> Bernard Cheah
>> http://www.tryiis.com/
>> http://support.microsoft.com/
>> http://www.msmvps.com/bernard/
>>
> I have tried this & am still getting the 530 error message.
> User 1 is a member of Domain Users.
> I added this group, as it says to do in the article referenced above & I
> am still getting the 530 error message!
>

I am very new to Active Directory, so please pardon my ignorance.
Where would I make these changes?

"Jon A Pedersen" <jon.areNOSPAM@itg.nu> wrote in message
news:Ob2XYDT4EHA.2568@TK2MSFTNGP11.phx.gbl...
>I found the reason for this behavior. For me it was a limitation for which
>computers users could log on to. They was restricted to their own computer
>only. When I removed it everything worked fine again. OWA was also affected
>by this limitation, but works fine now.
> Jon Are Pedersen
>
>
> "Mike" <mikey117@hotmail.com> skrev i meddelandet
> news:ujogT6S4EHA.4028@TK2MSFTNGP15.phx.gbl...
>>
>> "Bernard" <qbernard@hotmail.com.discuss> wrote in message
>> news:%23Eyhmvs1EHA.1192@tk2msftngp13.phx.gbl...
>>> Ensure user has logon locally right.
>>> Users Cannot FTP to a Windows 2000 IIS Server, System Reports 'Access
>>> Denied' with Event ID 100
>>> http://support.microsoft.com/?id=285806
>>>
>>> --
>>> Regards,
>>> Bernard Cheah
>>> http://www.tryiis.com/
>>> http://support.microsoft.com/
>>> http://www.msmvps.com/bernard/
>>>
>> I have tried this & am still getting the 530 error message.
>> User 1 is a member of Domain Users.
>> I added this group, as it says to do in the article referenced above & I
>> am still getting the 530 error message!
>>
>
>

If you haven't change this manually then this don't apply to your problem.
It is not default. But you do this on every user account, Account tab, Log
on to button. There you can let the user Log on to all computers or The
following computers. If the user have a specified computer wich she can log
on to then you click Log on to all computers and clic Ok. The restriction is
removed.
Jon Are Pedersen

"Mike" <mikey117@hotmail.com> skrev i meddelandet
news:%23t%23dTeT4EHA.1260@TK2MSFTNGP12.phx.gbl...
>I am very new to Active Directory, so please pardon my ignorance.
> Where would I make these changes?
>
> "Jon A Pedersen" <jon.areNOSPAM@itg.nu> wrote in message
> news:Ob2XYDT4EHA.2568@TK2MSFTNGP11.phx.gbl...
>>I found the reason for this behavior. For me it was a limitation for which
>>computers users could log on to. They was restricted to their own computer
>>only. When I removed it everything worked fine again. OWA was also
>>affected by this limitation, but works fine now.
>> Jon Are Pedersen
>>
>>
>> "Mike" <mikey117@hotmail.com> skrev i meddelandet
>> news:ujogT6S4EHA.4028@TK2MSFTNGP15.phx.gbl...
>>>
>>> "Bernard" <qbernard@hotmail.com.discuss> wrote in message
>>> news:%23Eyhmvs1EHA.1192@tk2msftngp13.phx.gbl...
>>>> Ensure user has logon locally right.
>>>> Users Cannot FTP to a Windows 2000 IIS Server, System Reports 'Access
>>>> Denied' with Event ID 100
>>>> http://support.microsoft.com/?id=285806
>>>>
>>>> --
>>>> Regards,
>>>> Bernard Cheah
>>>> http://www.tryiis.com/
>>>> http://support.microsoft.com/
>>>> http://www.msmvps.com/bernard/
>>>>
>>> I have tried this & am still getting the 530 error message.
>>> User 1 is a member of Domain Users.
>>> I added this group, as it says to do in the article referenced above & I
>>> am still getting the 530 error message!
>>>
>>
>>
>
>

Are we all set ?
Mike has solved his problem in other thread.

As for the logon locally right. This no doubt has some security issue with
logon locally privileges, this has been fixed in IIS6.0, where it only
required 'access via network' right. it is using network_cleartext (I know,
cleartext might be another issue).

--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/



"Jon A Pedersen" <jon.areNOSPAM@itg.nu> wrote in message
news:%23spxMrT4EHA.708@TK2MSFTNGP11.phx.gbl...
> If you haven't change this manually then this don't apply to your problem.
> It is not default. But you do this on every user account, Account tab, Log
> on to button. There you can let the user Log on to all computers or The
> following computers. If the user have a specified computer wich she can
> log on to then you click Log on to all computers and clic Ok. The
> restriction is removed.
> Jon Are Pedersen
>
> "Mike" <mikey117@hotmail.com> skrev i meddelandet
> news:%23t%23dTeT4EHA.1260@TK2MSFTNGP12.phx.gbl...
>>I am very new to Active Directory, so please pardon my ignorance.
>> Where would I make these changes?
>>
>> "Jon A Pedersen" <jon.areNOSPAM@itg.nu> wrote in message
>> news:Ob2XYDT4EHA.2568@TK2MSFTNGP11.phx.gbl...
>>>I found the reason for this behavior. For me it was a limitation for
>>>which computers users could log on to. They was restricted to their own
>>>computer only. When I removed it everything worked fine again. OWA was
>>>also affected by this limitation, but works fine now.
>>> Jon Are Pedersen
>>>
>>>
>>> "Mike" <mikey117@hotmail.com> skrev i meddelandet
>>> news:ujogT6S4EHA.4028@TK2MSFTNGP15.phx.gbl...
>>>>
>>>> "Bernard" <qbernard@hotmail.com.discuss> wrote in message
>>>> news:%23Eyhmvs1EHA.1192@tk2msftngp13.phx.gbl...
>>>>> Ensure user has logon locally right.
>>>>> Users Cannot FTP to a Windows 2000 IIS Server, System Reports 'Access
>>>>> Denied' with Event ID 100
>>>>> http://support.microsoft.com/?id=285806
>>>>>
>>>>> --
>>>>> Regards,
>>>>> Bernard Cheah
>>>>> http://www.tryiis.com/
>>>>> http://support.microsoft.com/
>>>>> http://www.msmvps.com/bernard/
>>>>>
>>>> I have tried this & am still getting the 530 error message.
>>>> User 1 is a member of Domain Users.
>>>> I added this group, as it says to do in the article referenced above &
>>>> I am still getting the 530 error message!
>>>>
>>>
>>>
>>
>>
>
>