Re: I cant' logon to my server with an Administrator .

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 08/10/04 

Date: Tue, 10 Aug 2004 17:26:38 GMT

If this is a domain controller you want to make sure that administrators is in the
setting for logon locally and that there is no overriding setting in deny logon
locally keeping in mind that administrators are in the users and everyone groups. I
would suggest that you define deny logon locally and add the guest account in Domain
Controller Security Policy. You should also check Local Security Policy on that
domain controller to see what the effective settings are for logon locally and deny
logon locally. If you change Domain Controller Security policy, run secedit
/refreshpolicy machine_policy /enforce on it to speed up change to local policy.

If this is not a domain controller, look in the Local Security Policy of the server
for those two user rights and configure them appropriately keeping in mind that a
higher level policy such as a GPO for the Organizational Unit that the server is in
can override the local settings and if that is the case the GPO will have to be
modified to allow local logon. --- Steve

" Sara" <vaio9003@yahoo.com> wrote in message
news:etKruMvfEHA.2536@TK2MSFTNGP09.phx.gbl...
> Hi everyone,
>
> I change sth on my policy, like a month ago, and never restart my server.
> when I restart my server last night, and then I cant' logon as an
> administrator, since it said can't logon locally.
> I can only logon to my server by using remote desktop from other machine.
> I check on Default domain controller security settings, and under local
> policies- users right assignment.
> Allow lo on locally, I do see administrator in teh setting ?? what else
> should I check from here???
> Can anyone give me any advice. ? Thank you .
>
>

Relevant Pages

  • Domain Controller Security Policy errors
    ... Security Policy or the Domain Controller Security Policy. ... The DC is also a print and file server. ... The domain controller for Group Policy operations is not available. ...
    (microsoft.public.win2000.active_directory)
  • Re: issue accessing an AD server
    ... You can reset local security settings to default defined levels as described ... However on a domain controller, ... Security Policy will override user rights assignments. ... > restore the server from tape. ...
    (microsoft.public.win2000.security)
  • Re: Local policy does not allow interactive login
    ... I am not sure what the exact problem is but if the server you took offline was a ... you are in native mode as shown in Active Directory Users and Computers. ... fsmo domain controller as their preferred dns server in tcp/ip properties as shown by ... The fact that you can not access Domain Security Policy may be due to the fact that ...
    (microsoft.public.win2000.group_policy)
  • Re: Logging IP address when Administrator logs in
    ... If you enable auditing of account logons in Domain Controller Security policy it will ... computers it will record a logon event in the security log of the computer that the ... administrators account on domain computers they need to manage. ...
    (microsoft.public.win2000.security)
  • Re: Does not permit login interactively
    ... administrators listed in the logon locally user right and have the deny logon locally ... If you can logon to a domain member computer as a domain administrator, ... adminpak on that computer from the install cdrom for Windows 2000 Server in the /I386 ... Security Policy to configure logon locally user right to have the administrators ...
    (microsoft.public.win2000.group_policy)