Win 7 login error: "You cannot log on because the logon method ...."

[geekappa]

Win 7 login error: "You cannot log on because the logon method ...."

Hi,

When a user in the domain tries to login, the error is "You cannot log on because the logon method you are using is not allowed on this computer". Many users would not have saved their work. Is there any possible way to make the user login without changing the group policy as below:
Run gpedit.msc.
2. Expand Computer Configuration\Windows Settings\Security Settings\Local Policies
3. Click on User Rights Assignment
4. Ensure that "Allow log on locally" includes Administrators, Backup
Operators, Domain Users or Users.

This is because am a desktop support guy and I don't have rights to modify the GP.

Any help would be appreciated.

 

[Kirsch]

Is the user trying to login to a regular workstation? Or a server?

 

[geekappa]

It's just a system in the domain. So a client workstation.

 

[Kirsch]

After researching, it looks like this error only pops up when a User without elevated privileges attempts to login onto the Domain Controller...

 

[geekappa]

But this isn't a domain controller system.....This issue has cropped up recently and it's increasing for all domain users who try to login to a Win 7 system. We have also created an OU for the same. Is there no other way to get the root cause?

 

[isho777]

In this i managed to log in a user by doing 2 things maybe it was not necessary. I logged in with administrator account successfully in the local computer and did the following:

1. Logged in the active directory Server for the domain (using remote desktop)and I gave the user all the privileges on the domain i.e
on the server click Start>all programs>administrative tools>Active directory users and computers
locate the user > open the properties tab of the user > go to Member Of...> and add Administrators and Domain admins to the user. Then try to log in the user from the client computer. Remember to remove the prvileges after.
If no Remote desktop program is available then go to the actual server.
2. Also created the user profile manually on the local computer. In the local computer click Start > Control panel > Users > Manage Users
In the list of users locate the user you want. if user is not there add the user. You must type username and your Domain name.
If the user is already there then its a different problem. You can do the following at your own risk

Rename the user profile in the local computer:
Log in with admin account and rename C:\Users\Username to C:\Users\UsernameOld. this should prevent the old profile from logging in. Create a new user profile as above. Let user log in. remember to copy old files from usernameOld to the new account Username.
Maybe it helps.