Another great troubleshooting tip from Steve Patrick’s blog (thanks, Steve, for breaking everything so we can learn from your mistakes :) ). If you enable the “Display information about previous logons during user logon” setting at Computer ConfigurationAdministrative TemplatesWindows ComponentsWindows Logon Options (part of the WinLogon.admx template), you can’t login if your computer is part of a Windows 2000 Server or Windows Server 2003 Active Directory domain. Instead, you’ll get the error, “Security policies on this computer are set to display information about the last interactive logon. Windows could not retrieve this information. Please contact your network administrator for assistance.” If you’re a member of a workgroup, it works perfectly. According to Steve, it’ll also work correctly in a Windows Server “code name” Longhorn domain.

Here’s how it’s supposed to work (from Steve’s blog):