I have windows server 2003 and all the users have windows xp with administrative privileges in local group setting so I want to reduces them to normal users another meaning (currently normal user on active directory and administrator on his/her local setting), When I try to remove the user from administrator local setting I can not logon again there is a message say (The local policy of this system does not permit you to log on interactively) I fixed this problem by created a new policy to the computers group computer configuration --> windows setting --> security setting --> then expand local policy --> user rights assignment --> logon locally so I added the users want to logon with administrative privileges and administrator because can not add user or group without administrator account. It was work like magic but now I have another problem every time when the user logon to windows like first logon for example I create some folders and files on desktop and I made some customization on screen when I restart computer and logon again there was nothing appeared on desktop it was look like first logon on computer. I hope explained well Can anyone help urgently please! Thanks alot

I have Windows Server 2003 and all the users have windows XP with administrative privileges in local group setting, so I want to reduce them to normal users. i.e. Currently normal user in active directory and administrator on his/her local setting machine. When I try to remove the user from the administrators local group I can not logon again. There is a message saying

The local policy of this system does not permit you to log on interactively

I fixed this problem by created a new policy in the computers group computer configuration --> windows setting --> security setting --> then expand local policy --> user rights assignment --> logon locally. So I added the users I want to logon with administrative privileges and administrator because I can not add a user or group without the administrator account.

It was working like magic but now I have another problem. Every time when the user logs on to Windows it acts like the first logon. For example, I create some folders and files on the desktop and I made some customization on screen. When I restart the computer and log on again nothing appeared on the desktop. It looked just like the first logon on the computer.