I just made some users and groups and placed them in a OU (Organizational Unit). Then I made a Group Policy Object where I disabled the control panel from the Start-menu. I linked the OU to the GPO and then I logged in as a user of that OU but the control panel didn't move away. Can you tell me where I have to take care off by using GPOs?? Thankx very much!!!!!! Luk

What sort of clients do you have. GPOs will only apply to w2k clients. How long did you want after the GPO was set. It may take a little while before the policy is applied.

Well the problem is solved, I had the wrong DNS. But I've got another problem. If I want to logg on on my other windows2000 computer in the domain, with a user made with the domain controller, then I always get the message : "The local policy of this system does not permit you to logon interactively".

This could also be a group policy issue. The most common cause of this problem is that the 2000 machine is a domain controller and you are trying to log on with a non-administrative account which is not permitted by default. The "log on interactively" is a fancy way of saying logging on locally. If the machine is not a dc as described above, then check your GPO to make sure you did not set a policy limiting logging on locally.

There cannot be a problem with the GPO I think, the first time I tried it worked perfectly, but then it was going bad. I gave the user all the administrative rights but it cannot log in. Can there be other problems???

Well, it's almost certainly a GPO issue. It is telling you flat out that the policy does not permit it. I would look into that a bit more.

I had the same thing happen to me a few days ago. I was trying to logon to a domain and got the same error. I went in to the security settings on the machine I was using and found under the section deny logon locally that the user account I was trying to logon with was disabled. I removed that and was able to logon fine. You may want to check this out.