I can join my domain now on my other machine but another problem came out, It says an error

 

"You cannot log on with this method please contact your local administrator"

 

I can log on with domain Administrator account but not a standard user account, How do I fix this.

#1:

1. Run gpedit.msc.

2. Expand Computer Configuration\Windows Settings\Security Settings\Local Policies

3. Click on User Rights Assignment

4. Ensure that "Allow log on locally" includes Administrators, Backup

Operators, Domain Users or Users.

 

#2:

1. Run gpedit.msc.

2. Expand Windows Settings\Security Settings\Local Policies

3. Click on User Rights Assignment

4. Ensure that "Deny log on locally" is empty.

No I ment that on my second laptop (not the domain controller) gets that message and I went to gpedit.msc and opened it but "Users" is not there and the add button is greyed out

btw this a domain not local

Check the applied policies, you cannot change local policy because you are on domain, so check WHICH policy is blocking you from loggin in.

Check the applied policies, you cannot change local policy because you are on domain, so check WHICH policy is blocking you from loggin in.

 

I can't find the policy which is blocking me from logging on to the domain, they are billions of them but I cant find the right one!

#1:

1. Run gpedit.msc.

2. Expand Computer Configuration\Windows Settings\Security Settings\Local Policies

3. Click on User Rights Assignment

4. Ensure that "Allow log on locally" includes Administrators, Backup

Operators, Domain Users or Users.

 

#2:

1. Run gpedit.msc.

2. Expand Windows Settings\Security Settings\Local Policies

3. Click on User Rights Assignment

4. Ensure that "Deny log on locally" is empty.

 

 

These are the settings you're looking for, just browse your policies (like Default Domain Policy and so on).

nice...