Ok, not sure what I'm missing here.

I came in to work this morning and the office manager can't log into her computer. I look into it and she's getting a message "The local security policy does not allow you to log in interactively" So I log into the machine as admin and there is nothing listed locally for deny logon for her but she shows up under effective policy for deny logon.

These are W2K clients on a W2K AD Domain. So I go to the server and check out the domain security policy. Sure enough she's listed there under deny logon. So I clear it out. She still can't log in. I restart the server service. She still can't log in. I go back to her computer and it still shows up under effective security policy.

What am I missing?