Re: I cant' logon to my server with an Administrator .

From: Sara (vaio9003_at_yahoo.com)
Date: 08/10/04 

Date: Tue, 10 Aug 2004 15:09:49 -0700

Mine is a DC with a AD so that's no any local security policy tho.
when i open default domain security setting, then I go Local policies->User
Rights assignment-> When I define these policy settings, I click on apply ,
then it has an error msg "Administrator must be granted the logon local
rights. "
I know the "adminitrator" has a right to allow log on locally under "
Default Domain controller security settings. " what else should I check ?

Last question is that can I run Dcupdate in Win 2k3 instead of refreshpolcy
?

"Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message
news:iz7Sc.233010$a24.14924@attbi_s03...
> If this is a domain controller you want to make sure that administrators
is in the
> setting for logon locally and that there is no overriding setting in deny
logon
> locally keeping in mind that administrators are in the users and everyone
groups. I
> would suggest that you define deny logon locally and add the guest account
in Domain
> Controller Security Policy. You should also check Local Security Policy on
that
> domain controller to see what the effective settings are for logon locally
and deny
> logon locally. If you change Domain Controller Security policy, run
secedit
> /refreshpolicy machine_policy /enforce on it to speed up change to local
policy.
>
> If this is not a domain controller, look in the Local Security Policy of
the server
> for those two user rights and configure them appropriately keeping in mind
that a
> higher level policy such as a GPO for the Organizational Unit that the
server is in
> can override the local settings and if that is the case the GPO will have
to be
> modified to allow local logon. --- Steve
>
>
> " Sara" <vaio9003@yahoo.com> wrote in message
> news:etKruMvfEHA.2536@TK2MSFTNGP09.phx.gbl...
> > Hi everyone,
> >
> > I change sth on my policy, like a month ago, and never restart my
server.
> > when I restart my server last night, and then I cant' logon as an
> > administrator, since it said can't logon locally.
> > I can only logon to my server by using remote desktop from other
machine.
> > I check on Default domain controller security settings, and under local
> > policies- users right assignment.
> > Allow lo on locally, I do see administrator in teh setting ?? what else
> > should I check from here???
> > Can anyone give me any advice. ? Thank you .
> >
> >
>
>

Relevant Pages

  • Re: Backing out Complex passwords enabled in Domain Group policy.
    ... Most documentation I have seen states that all account policies can only be defined ... Define settings for all account polices at the domain level, ... and check the Local Security policy on the domain controller for effective settings. ...
    (microsoft.public.win2000.security)
  • Re: I cant logon to my server with an Administrator .
    ... There is a Local Security Policy on all domain computers, however defined settings in ... Domain Controller Security Policy will override Local Security Policy defined ...
    (microsoft.public.win2000.group_policy)
  • Re: W2K AutoLogon Feature (234562)
    ... Terminal Services on a domain controller. ... the user right under Local Security Policy. ... > logon portion, I get an error that says "The local policy ...
    (microsoft.public.win2000.security)
  • Re: MICROSOFT_AUTHENTICATION_PACKAGE
    ... Is the security option "additional restrictions for anonymous connections" - ... changes to the Local Security Policy of a domain controller, ... then examine the settings in the Local Security ... domain machine if you changed domain security policy. ...
    (microsoft.public.win2000.security)
  • Re: security log anomolies
    ... > have both account logon and logon events enabled for success and failure. ... > overriding Local Security Policy. ... > controllers in particular as Domain Controller Security Policy will override ...
    (microsoft.public.win2000.security)