Re: Need help ASAP.

From: Chriss3 (noSpamHere_at_chrisse.se)
Date: 03/11/04 

Date: Thu, 11 Mar 2004 17:40:07 +0100

RM Built-in Administrator can't be added to the Deny Login field so far I
know. How ever is it in the Allow Logon Locally logon field? If you define
this policy for a user or group, you must also give the Administrators group
this right.

On workstations and servers: Administrators, Backup Operators, Power Users,
Users, and Guest.

On domain controllers: Account Operators, Administrators, Backup Operators,
Print Operators, and Server Operators.

That's the defaults! 

-- 
Regards
Christoffer Andersson
No email replies please - reply in the newsgroup
"RM" <anonymous@discussions.microsoft.com> skrev i meddelandet
news:b23501c40783$59b1c7f0$a401280a@phx.gbl...
> Hi, I just want to ask everybody if someone already
> encountered an error "The Local policy of this system does
> not permit you to log on interactively" on a domain
> environment? I have no idea who configured the server but
> it was just given to me by our company.  The only
> information that I've got is every account can login to
> the server physically as long as they are a member of
> Administrator, however, the only account that couldn't is
> the ADMINISTRATOR itself.  Everytime the Administrator
> tries to login, the only message that I have is "The Local
> policy of this system does not permit you to log on
> interactively."  Is there anyone out there who can direct
> me to the right track on what to do? I already checked the
> Local and Domain policy and I didn't see the Administrator
> on the Deny Login field.  Thanks and have a nica day.
>
>
> Russell

Relevant Pages

  • Re: administrator locked out of SBS 2003
    ... Try to logon to the console using this account. ... see which groups the administrator is a member of and post back ... Even the VMware KB's as I've all ready discovered the server V2.0 ... so I deleted the policy. ...
    (microsoft.public.windows.server.sbs)
  • Re: GP loopback processing on Windows 2003 terminal service, strange problem!
    ... You should not have to go through all that to get the policy to work ... Check that your other W2003 Server points ONLY to the domain controller ... > any other GP's then logging on to the TS server. ... > is not local administrator on this TS server? ...
    (microsoft.public.windows.group_policy)
  • Re: windows 20000 problem
    ... So you are saying the problem is on just this one particular server that is ... in an OU with other servers that do not lock down the domain admin account. ... The part about logging in as local account that bypasses this policy ... > and the administrator is in an OU where the policy doesnt apply. ...
    (microsoft.public.win2000.security)
  • Re: administrator locked out of SBS 2003
    ... enterprise admins ... group policy creator owners ... Other than lacking exchange administrator this is pretty much normal. ... Even the VMware KB's as I've all ready discovered the server V2.0 ...
    (microsoft.public.windows.server.sbs)
  • Re: Unable to login to SBS Server
    ... do you think it could be a group policy error/problem even ... Les Connor [SBS MVP] ... to resolve this issue & double checked that the administrator is ... We were asked to look at a SBS 2003 server & found that the ...
    (microsoft.public.windows.server.sbs)