Re: Local policy prevents login interactively

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Eriq Neale (eon_at_eonconsulting.idonotwantspam.net)
Date: 02/08/05 

Date: Tue, 08 Feb 2005 14:41:07 GMT

On 2005-02-07 12:31:04 -0600, "=?Utf-8?B?UGV0ZQ==?="
<Pete@discussions.microsoft.com> said:

> Thank you Eriq - how do I check that permission "log in locally" for
> any particular group? I can see all of the groups that the
> administratyor account belongs to but how do I verify the permissions
> for the groups and check to see if any of them have the log in locally
> permission denied?

Hey Pete.

in a default SBS 2003 install, the Administrator account should belong
to the following groups:

Administrators
Domain Admins
Domain Users
Enterprise Admins
Group Policy Creator Owners
Mobile Users
Schema Admins

If any other groups are listed, remove them from the Administrator
account, then see if you can log in. If you can, add the groups back
one by one until you find the one that's causing the problem. In
reality, if you don't have a really sound reason for having the
Administrator account added to a particular security group other than
the defaults, then don't.

HTH...

-Eriq 

-- 
Eriq Neale - MCSE, MCSA Messaging, MCP Small/Medium Business, Mac Guru
EON Consulting - www.eonconsulting.net
Need additional IT insight? E-mail "support at eonconsulting dot net"

Relevant Pages

  • Re: grant administrator account permissions
    ... administrator account full control permission to all mailboxes. ... In Exchange System Manager, locate the target database (Expand Servers, ... the Administrator account and grant this account Full Control permissions ... It may be necessary to wait up to 15 minutes for the permissions granted to ...
    (microsoft.public.windows.server.sbs)
  • Re: SP3 setup error
    ... Boot to Safe Mode and log in with the Administrator account. ... You need to edit the Permissions on ... Settings/All Users/Documents to "share this folder on the network", then retried the copy of beethov9.wma from the Software Update Installation Wizard - and the /Documents folder is now gone. ...
    (microsoft.public.windowsupdate)
  • Re: Problems with some programs now Ive adopted a non-administrative account
    ... well--users are prompted when more permissions are needed for an install. ... >> If you are a home user go ahead and use your administrator account. ... >> runas and administraor credentials while logged on as a regular user just ...
    (microsoft.public.security)
  • Re: DCOMCNFG nightmare with service
    ... ImageExtractorService to run using the same Administrator account identity. ... I open DCOMCNFG I see two entries related to my service: ImageExtractor Class ... Launch and Activation Permissions: Administrators have all permissions ...
    (microsoft.public.vc.atl)
  • Re: Retrieving files from Docs & Settings subfolders in private profiles
    ... encryption, it's just the 'private' box was checked under ... the folder properties dialogue box. ... around and I don't see any way to bring up permissions, ... >> open them up (even with the administrator account). ...
    (microsoft.public.windowsxp.security_admin)