Create an OU and add a new group policy to it. Then edit the group
policy and drill down to user rights. In the "log on locally" user right add
the users and administrators group. For the "deny log on locally" user right
add the guest account. Move the problem computer into that OU. On the domain
controller run secedit /refreshpolicy machine_policy /enforce. Wait
about five minutes and reboot the problem computer. The idea is to have the
OU policy override the Local Security Policy settings. Once you can log on
[hopefully], view the user rights assignments for the problem computer and
make appropriate changes. --- Steve

"Faisal" <faisal_qasimpk@yahoo.com> wrote in message
news:d55ce0a6.0307080550.275e4207@posting.google.c om...