RE: HELP!!!!

Thanks for the reply. All is OK now with the exception that Remote Access
does not work. I have a nother thread going with Matt right now.
--
Thanks for your help.


""Jenny wu [MSFT]"" wrote:

> Hi Andyn,
>
> Thanks for posting here!
>
> According to your post, I understand that users can not logon to the SBS
> server locally after you setup Remote Access. If I am off base, please
> don't hesitate to let me know.
>
> This issue appears strange. I'd like to verify the following information to
> help narrow down the issue:
>
> 1. Did the issue happen when users logon the server box locally (before the
> server computer side) or when users logon the server using Remote Desktop
> connection?
> 2. What is your meaning ' DHCP Server and everything is down after trying
> to install remote access.'? How you know DHCP server down? Can your client
> workstations get proper IP?
> 3. What IP address do the clients get currently? What error message do you
> get when you run ipconfig /release and ipconfig /renew?
> 4. If the issue happened when remote access the server, does the issue
> happen in client workstations?
> 5. What is your server OS version? Have you installed ISA on it? What is
> version?
> 6. Can you connect to RWW via https://FQDN/remote and logon as the
> administrator, are you able to connect to the server using "Connect to
> Server Desktops"?
>
> The error "The local policy of this system does not permit you to log on
> interactively" may occur if the user does not have "logon locally" user
> right. I would like to confirm that you have check the "Allow logon
> locally" policy and "deny logon locally" policy in the default domain
> policy.
>
> Please check if the user accounts who can not logon to the server is a
> member of either the Remote Operators group or the Domain Power Users
> group. On SBS 2003, the "Deny log on locally" policy setting is applied to
> the Remote Operators group in the Default Domain Controllers Policy object.
> This policy setting also applies to the Domain Power Users group because
> the Domain Power Users group is a member of the Remote Operators group.
> Since a deny policy always overrides an allow policy, this policy setting
> prevents users from logging on to domain controllers in the domain, even if
> the "Allow log on locally" policy applies to the same users.
>
> Remove the Domain Users group or those users from the Remote Users group or
> the Domain Power Users group. Try to test, how about the result?
>
> Please refer to the following KB article to get detail methods:
> "The local policy of this system does not permit you to logon
> interactively" error message when you try to log on to a computer that is
> running Windows Small Business Server 2003 by using an Administrator account
> http://support.microsoft.com/?id=841188
>
> I am currently standing by for your info. I am always happy to be of
> further assistance.
>
> Have a nice day!
>
> Best Regards,
>
> Jenny Wu
> Microsoft CSS Online Newsgroup Support
> Get Secure! - www.microsoft.com/security
> ======================================================
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>
> When opening a new thread via the web interface, we recommend you check the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
> ======================================================
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> --------------------
> >Thread-Topic: HELP!!!!
> >thread-index: AcWtAV2KjCko1sNIQ0KycdmmZ5Pu7w==
> >X-WBNR-Posting-Host: 209.221.140.112
> >From: "=?Utf-8?B?Tm9ydGh3ZXN0IFVwZ3JhZGVzIFBsdXM=?="
> <andyn@xxxxxxxxxxxxxxxxxx(donotspam)>
> >Subject: HELP!!!!
> >Date: Mon, 29 Aug 2005 18:23:02 -0700
> >Lines: 11
> >Message-ID: <BD98B263-D239-4BDB-91FB-8E875BF4773C@xxxxxxxxxxxxx>
> >MIME-Version: 1.0
> >Content-Type: text/plain;
> > charset="Utf-8"
> >Content-Transfer-Encoding: 7bit
> >X-Newsreader: Microsoft CDO for Windows 2000
> >Content-Class: urn:content-classes:message
> >Importance: normal
> >Priority: normal
> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> >Newsgroups: microsoft.public.windows.server.sbs
> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> >Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
> >Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:148952
> >X-Tomcat-NG: microsoft.public.windows.server.sbs
> >
> >
> >-- I am not sure what happened, but after trying to set up Remote Access
> and
> >restarting the Server, My client can no longer log in as Administrator. We
> >get the following error: "The Local Policy Of This System Does Not Permit
> You
> >To Log On Interactively. What the heck happened and how do we fix.
> >
> >I tried to log in remotely to change password settings, but it will not
> >allow me to. I keep getting the Login/Password and when I put in the
> correct
> >domain, username and password it keeps asking for it. Please advise if
> there
> >is another way to fix this, as my clients DHCP Server and everything is
> down
> >after trying to install remote access.
> >
>
>
.

Relevant Pages

  • Re: RWW and Remote desktop stopped working on all clients
    ... After diggin through ALL the group policies, I found Remote ... Desktop DISABLED under the Account Lockout policy - I don't think I've even ... adminsitrator or another account with Domain Admin role; also the server ...
    (microsoft.public.windows.server.sbs)
  • RE: HELP!!!!
    ... I understand that users can not logon to the SBS ... server computer side) or when users logon the server using Remote Desktop ... The error "The local policy of this system does not permit you to log on ...
    (microsoft.public.windows.server.sbs)
  • Re: How to allow users to create groups and shares
    ... policy and on a existing or new created policy for the member servers. ... Filtering: Not Applied ... Allow remote desktop connections ... check with GPMC on the server or from a client the policy settings. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Cannot Log Remotely Being a Remote User
    ... Well, I hope my users group permissions are well assigned, How could I ... account to the domain-wide Remote Desktop users group, ... "Allowlogon through Terminal Services" ... MCSE, CCEA, Microsoft MVP - Terminal Server ...
    (microsoft.public.windows.terminal_services)
  • Re: Cannot Log Remotely Being a Remote User
    ... account to the domain-wide Remote Desktop users group, ... MCSE, CCEA, Microsoft MVP - Terminal Server ...
    (microsoft.public.windows.terminal_services)
Loading