Re: Domain admin login problem

Hi,

So my understanding is that you are able to log on with the Built In
"Administrator" account, but if you try to log on as a user who is a
member of the "Domain Admins" group he is unable to logon.

Going by this understanding I would want a Whoami dump of the user. If
the user cannot log on to DC, try logging on to a client workstation
and then run the following from the cmd

Whoami /all >whoami.txt

You can download the Whoami.exe from the following link

http://www.microsoft.com/downloads/details.aspx?FamilyID=3e89879d-6c0b-4f92-96c4-1016c187d429&DisplayLang=en

Please send the dump to me in mail as the reply would be quicker then.

AJ Sarkaria


Several Login attempt wrote:
if i logon as domain Admin the error message is:

"Unable to log you on becase of an authentication restriction". There is no
error code for that. even i checked the event viewer log. But i can logon as
Administrator Account.

Trust this clarify.
regards
rajaguru

"AJ" wrote:

Hi,

Question for you: How can you logon to the DC as a Local Admin? There
is no Local Admin on a DC...

Also your question is no clear. What I understand is that You are not
able to logon on do DC as a Domain Admin? If yes then send me a mail
with the error message that you get along with the details of actually
what is happening...

Thanks

AJ

Several Login attempt wrote:
hi
i checked all GPO & Local Policies & Event Viewer of Backup DC & all Client
machines. Even i tried to create a new user, the same error message.
Pls help
rajaguru

"Burhan" wrote:

may use GPO.

Default domain controller policy - Computer Configuration-Windows
Settings-Securtiy Settings-Local Policy/UserRighAssigment // Allow logon
locally

burhan/mcsa

"Several Login attempt" <SeveralLoginattempt@xxxxxxxxxxxxxxxxxxxxxxxxx>,
haber iletisinde þunlarý
yazdý:62E2D724-99D1-47C9-A97D-AABD27B7A736@xxxxxxxxxxxxxxxx
No i don't have enterprise admin rights bcaz my n/w structure is as:

One parent Domain in remote pertaining somany DCs in various location.. In
that, my Additional DC gives the Problem. I contacted my parent DC Admin
person, the same problem is also arised in some of the other DCs.

So i want a clear solutio at the earliest. Pls
Rajaguru

"Burhan" wrote:

IS domain admins have entrprise admin right??

"Several Login attempt" <SeveralLoginattempt@xxxxxxxxxxxxxxxxxxxxxxxxx>,
haber iletisinde ?unlary
yazdy:4579B7C2-059B-4FBF-A1C0-7EA52BD71FEA@xxxxxxxxxxxxxxxx
we installed win 2k3 server as a primary & additional DCs. if the
Domain
admin login account is not permitted to the Additional DC. I checked
all
Local & domain Controller, domain Security Policies & etc.

If i login as Local Admin, the additional DC accept. if i login as
Domain
Admin, the Additional DC Shows the error message as:

"Unable to logon, because the account restricted".

How to solve the problem? if anyone pls help me.
Rajaguru
rajaguru_a@xxxxxxxxxxxxxx









.

Relevant Pages

  • Re: local admin account password
    ... What I think would be a better scheme is to set a very complex* random ... This eliminates the vulnerability created by weak admin passwords ... Do you think if someone wanted to break the local admin account they ...
    (Focus-Microsoft)
  • Re: security log + unauthorized lgons?
    ... Login to my SBS 2003 SP1 premium server remotely and had an ... Who else besides you has the admin access/passwords? ... account login is due to normal maintenance? ...
    (microsoft.public.windows.server.sbs)
  • Re: Tough password question!
    ... Windows XP client machine and the admin whose password contains " cannot log ... >> complicated including non-alpha chars to join the domain. ... it will not login when the admin ... >> account and it will login if I change the domain admin password to ...
    (microsoft.public.windows.server.active_directory)
  • Re: Client Installation Issues: SMS 2.0 SP5
    ... Log on locally as LOCAL admin and install. ... Log on Locally as domain user who has LOCAL admin rights. ... The SMS Service account IS a domain admin ...
    (microsoft.public.sms.setup)
  • Re: computers locked out of the domain?
    ... Admin so that some one could work at the station. ... in the active directory' users & computers I looked at the computer account ... down or the account etc but then when I log on to the local admin acc' I can ... use the remote desktop to connect to the server, no problems & when I take ...
    (microsoft.public.windows.server.networking)