Re: Logon Locally No Longer Appears in Logon Choices on Domain Controller VIA Remote Desktop

Hi Meinolf,
We are using Domain accounts to access the servers locally and the Domain Admins group is a member of the local admins on the DC's.
This problem was reported by another DA and after researching the issue I think I know what happened.
When a server is promoted to a DC the logon locally option is removed from the logon dropdown.
What I think happened in our case was that somehow the "Default Domain" was not selected in the dropdown by default and this showed the empty white space in the logon to field.
I used GPO to implement the following defaultdomain.adm file, link it to the domain and ensure that the default domain is always selected.

CLASS MACHINE
CATEGORY !!Logon
CATEGORY "Logon Settings"
KEYNAME "SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"
POLICY "Default Domain"
PART "Default Domain" EDITTEXT
VALUENAME "DefaultDomainName"
END PART
END POLICY
END CATEGORY
END CATEGORY
[strings]
Logon="Default domain selection"

Thank You for your help,
Shawn

"Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message news:ff16fb66a447c8cab9ae465b78eb@xxxxxxxxxxxxxxxxxxxxxxx
Hello yukon727,

If it was possible before, find the changes done in your GPO's about "Allow logon locally". What account are you using and what is the complete error message you get when your try it?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Hi All,
I have noticed that the ability to logon locally to any of our domain
controllers (windows 2003 native) is no longer available via remote
desktop.
Has anyone else run into this issue?
Thank You,
yukon727


.

Relevant Pages

  • Re: Force PW change with notice
    ... Domain accounts and a very large number of mobile users. ... > 'Change password at next logon is no good' as it doesn't provide enough ... Hi Navigato, ... cant "logon using dial up networking") when the password expires they cannot ...
    (microsoft.public.security)
  • Re: Integrated Authentication Fails, Basic Authentication works
    ... When we set the directory security to ... > Integrated we cannot logon w/ domain users. ... > we can logon no problem w/ the domain accounts. ... > As soon as we enable windows auth, ...
    (microsoft.public.inetserver.iis.security)
  • Re: How to Setup TS User
    ... drive mappings and logon script according to the OU they are in in the main ... mappings established when they work in the remote site but they get to their ... same personal domain account to the TS. ... Yes all accounts are domain accounts, ...
    (microsoft.public.windows.terminal_services)
  • Integrated Authentication Fails, Basic Authentication works
    ... server w/ IIS v5. ... Integrated we cannot logon w/ domain users. ... we can logon no problem w/ the domain accounts. ... As soon as we enable windows auth, ...
    (microsoft.public.inetserver.iis.security)
  • Re: Integrated Authentication Fails, Basic Authentication works
    ... Does your webpage need to connect to a remote resource (eg database server, ... Integrated we cannot logon w/ domain users. ... we can logon no problem w/ the domain accounts. ... As soon as we enable windows auth, ...
    (microsoft.public.inetserver.iis.security)