RE: Login Access Denied by SBS2003

From: Jonathan Lotman [MSFT] (a-jonlot_at_online.microsoft.com)
Date: 05/19/04 

Date: Wed, 19 May 2004 02:01:56 GMT

Check to see if you can logon with the administrator account via a Remote
Desktop Connection. If you can do so, then look at the Administrators
account in Active Directory Users and Computers to see if it has been added
to the Remote Operators group. If so, remove it. This group can access the
server via TS, but is denied the ability to logon to the console.

Thank you,
--------------------------
Jonathan Lotman
Microsoft Online Support Engineer

Microsoft Corporation
Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================

--------------------
| Content-Class: urn:content-classes:message
| From: "John A." <anonymous@discussions.microsoft.com>
| Sender: "John A." <anonymous@discussions.microsoft.com>
| Subject: Login Access Denied by SBS2003
| Date: Tue, 18 May 2004 17:08:56 -0700
| Newsgroups: microsoft.public.windows.server.sbs
|
| Tuesday, May 18, 2004, 19:05cdt
| Hello,
|
| Yes, I have been denied access by what appears to be
| a phantom built, "Local Policy",
| to a fresh install of MS's Small Business Server 2003.
|
| I was finishing up the install with the assignment of
| e-mail, etc. and decided to reboot
| the server. When it came up, after what seemed like an
| incredible amount of time setting
| up the network, I tried to log in as the administrator,
| but no luck. I tried to log in as each
| of the users that I had just installed, but there wasn't
| any luck there either. Every time I
| tried to login the message was flashed on the
| screen, "The local policy of this system
| does not permit you to logon interactively".
|
| This is a revolting development; never have seen this
| message before. So ... how does
| one circumvent this lockout; short of a reinstall of
| course?
|
| Thanks,
| John
|
| PS .... I have a copy of "Administrator's Companion
| Microsoft Windows Small Business
| Server 2003" by Charlie Russel, but I haven't found the
| solution to the dilemma there.
|
|

Relevant Pages

  • Re: Please help refresh my memory on AD DC
    ... When I boot my Laptop I reach the Logon screeen for XP Laptop and here I am ... administrator account. ... account to be able to Login so I can control it from the DC. ... A Server has websites already hosted on it in a Workgroup and now I join it ...
    (microsoft.public.windows.server.active_directory)
  • Re: Constrained delegation question!
    ... The event logs we need to know about are the ones on the server running the services you are controlling remotely. ... Can you show what happens when you have a console app that accesses the remote server running the services in terms of the security audits on the ... AUTHORITY\ANONYMOUS LOGON event. ... you won't be able to get Kerb delegation to ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: HELP!!!!
    ... Please feel free to post back when you need further assistance on the logon ... All is OK now with the exception that Remote Access ... >> server locally after you setup Remote Access. ... >> member of either the Remote Operators group or the Domain Power Users ...
    (microsoft.public.windows.server.sbs)
  • Re: Please help refresh my memory on AD DC
    ... "WEB308\administrator" does not longer exist, because DC's have no local administrator. ... The computer is now member of the domain, if you mean this and still has the local user account. ... "in order to add the server or pc I would have to have a user on the domain to logon to the domain. ... To Logon locally I would use the admin account of the Server 2003 machine. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Just administrator can access TS
    ... members of the Remote Desktop ... Event Source: Security ... Special privileges assigned to new logon: ... Microsoft MVP - Terminal Server ...
    (microsoft.public.windows.terminal_services)