I have Windows Server 2003 and all the users have windows XP with administrative privileges in local group setting, so I want to reduce them to normal users. i.e. Currently normal user in active directory and administrator on his/her local setting machine. When I try to remove the user from the administrators local group I can not logon again. There is a message saying
The local policy of this system does not permit you to log on interactively
I fixed this problem by created a new policy in the computers group computer configuration --> windows setting --> security setting --> then expand local policy --> user rights assignment --> logon locally. So I added the users I want to logon with administrative privileges and administrator because I can not add a user or group without the administrator account.
It was working like magic but now I have another problem. Every time when the user logs on to Windows it acts like the first logon. For example, I create some folders and files on the desktop and I made some customization on screen. When I restart the computer and log on again nothing appeared on the desktop. It looked just like the first logon on the computer.