Re: The Local Policy of This System Does Not Permit You to Log on Interactively.

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: SaltPeter (SaltPeter_at_Jupiter.sys)
Date: 03/03/04


Date: Wed, 3 Mar 2004 00:43:41 -0500


"Ran" <moxa76@hotmail.com> wrote in message
news:571f01c4006c$15581aa0$a401280a@phx.gbl...
> we are using the win 2000 server, accedently someone
> changed the local policy and added the administrator to
> the security setting of:
> Deny access to this computer from the network
> Deny access logon as a batch file
> Deny logon as a service
> Deny logon locally
> Deny logon through terminal services
>
> And now we are unable to logon into the server, it keep
> giving me this massage:
>
> The Local Policy of This System Does Not Permit You to Log
> on Interactively.
>
> Can you help me?

Install the server's adminpak.msi at a W2K Pro workstation, fire up MMC,
connect to the remote server and modify/revert the policy. Then change the
admin name and password so that user can't repeat the error.

Last but not least, why are you operating a server and distributing the one
administrator to all who manage the server or domain? Big no-no.

Suppose you decide to audit who does what on the network. There is no way of
knowing who is who unless each user which requires elevated privileges gets
his own distinct admin account. An even bigger no-no is leaving a server
with an admin account active as an interactive logon.

At this location, leaving any server or DC without loging off is considered
to be a serious breach of policy and a candidate for termination, no excuses
accepted. Even if user went for a pee. Since its simple to determine what
account is interactive, i know exactly who the guilty party is. Get the
picture?



Relevant Pages

  • Re: Can run Scheduled Task once only
    ... Dave Patrick ....Please no email replies - reply in newsgroup. ... | job" right - I looked both in Local Policy on this server and in Domain ... | Does that mean that "Deny logon as batch job" applied? ...
    (microsoft.public.windows.server.general)
  • The Local Policy of This System Does Not Permit You to Log on Interactively.
    ... Deny access to this computer from the network ... Deny logon as a service ... The Local Policy of This System Does Not Permit You to Log ...
    (microsoft.public.win2000.advanced_server)
  • The Local Policy of This System Does Not Permit You to Log on Interactively
    ... Deny access to this computer from the network ... Deny logon as a service ... The Local Policy of This System Does Not Permit You to Log ...
    (microsoft.public.windows.server.sbs)
  • Re: Printing Problems (2nd request)
    ... lpstat: Unable to connect to server: Connection refused ... # Encryption: whether or not to use encryption; ... got two printers connected, both of which used to work fine. ... Deny From All ...
    (Fedora)
  • apache2: includes filter error
    ... # Based upon the NCSA server configuration files originally by Rob McCool. ... # configuration directives that give the server its instructions. ... Deny from all ... AddCharset ISO-8859-1 .iso8859-1 .latin1 ...
    (Debian-User)