RE: HELP!!!!



Hi Andyn,

Thanks for your update. I am glad to know that the logon locally issue has
been resolved. Did you try my suggestion and get the issue resolved?

Please feel free to post back when you need further assistance on the logon
issue or the remote access issue and I am always happy to be assistance of
you!

Have a nice day!

Best Regards,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>Thread-Topic: HELP!!!!
>thread-index: AcWuMyudNzm1p8oDQuSkJ6TqDl5ueA==
>X-WBNR-Posting-Host: 209.221.140.112
>From: "=?Utf-8?B?Tm9ydGh3ZXN0IFVwZ3JhZGVzIFBsdXM=?="
<andyn@xxxxxxxxxxxxxxxxxx(donotspam)>
>References: <BD98B263-D239-4BDB-91FB-8E875BF4773C@xxxxxxxxxxxxx>
<mrU5wShrFHA.472@xxxxxxxxxxxxxxxxxxxxx>
>Subject: RE: HELP!!!!
>Date: Wed, 31 Aug 2005 06:52:04 -0700
>Lines: 139
>Message-ID: <6A2F3CBB-5283-460A-92E1-6D2F5C112069@xxxxxxxxxxxxx>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:149541
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Thanks for the reply. All is OK now with the exception that Remote Access
>does not work. I have a nother thread going with Matt right now.
>--
>Thanks for your help.
>
>
>""Jenny wu [MSFT]"" wrote:
>
>> Hi Andyn,
>>
>> Thanks for posting here!
>>
>> According to your post, I understand that users can not logon to the SBS
>> server locally after you setup Remote Access. If I am off base, please
>> don't hesitate to let me know.
>>
>> This issue appears strange. I'd like to verify the following information
to
>> help narrow down the issue:
>>
>> 1. Did the issue happen when users logon the server box locally (before
the
>> server computer side) or when users logon the server using Remote
Desktop
>> connection?
>> 2. What is your meaning ' DHCP Server and everything is down after
trying
>> to install remote access.'? How you know DHCP server down? Can your
client
>> workstations get proper IP?
>> 3. What IP address do the clients get currently? What error message do
you
>> get when you run ipconfig /release and ipconfig /renew?
>> 4. If the issue happened when remote access the server, does the issue
>> happen in client workstations?
>> 5. What is your server OS version? Have you installed ISA on it? What is
>> version?
>> 6. Can you connect to RWW via https://FQDN/remote and logon as the
>> administrator, are you able to connect to the server using "Connect to
>> Server Desktops"?
>>
>> The error "The local policy of this system does not permit you to log on
>> interactively" may occur if the user does not have "logon locally" user
>> right. I would like to confirm that you have check the "Allow logon
>> locally" policy and "deny logon locally" policy in the default domain
>> policy.
>>
>> Please check if the user accounts who can not logon to the server is a
>> member of either the Remote Operators group or the Domain Power Users
>> group. On SBS 2003, the "Deny log on locally" policy setting is applied
to
>> the Remote Operators group in the Default Domain Controllers Policy
object.
>> This policy setting also applies to the Domain Power Users group because
>> the Domain Power Users group is a member of the Remote Operators group.
>> Since a deny policy always overrides an allow policy, this policy
setting
>> prevents users from logging on to domain controllers in the domain, even
if
>> the "Allow log on locally" policy applies to the same users.
>>
>> Remove the Domain Users group or those users from the Remote Users group
or
>> the Domain Power Users group. Try to test, how about the result?
>>
>> Please refer to the following KB article to get detail methods:
>> "The local policy of this system does not permit you to logon
>> interactively" error message when you try to log on to a computer that
is
>> running Windows Small Business Server 2003 by using an Administrator
account
>> http://support.microsoft.com/?id=841188
>>
>> I am currently standing by for your info. I am always happy to be of
>> further assistance.
>>
>> Have a nice day!
>>
>> Best Regards,
>>
>> Jenny Wu
>> Microsoft CSS Online Newsgroup Support
>> Get Secure! - www.microsoft.com/security
>> ======================================================
>> This newsgroup only focuses on SBS technical issues. If you have issues
>> regarding other Microsoft products, you'd better post in the
corresponding
>> newsgroups so that they can be resolved in an efficient and timely
manner.
>> You can locate the newsgroup here:
>> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>>
>> When opening a new thread via the web interface, we recommend you check
the
>> "Notify me of replies" box to receive e-mail notifications when there
are
>> any updates in your thread. When responding to posts via your
newsreader,
>> please "Reply to Group" so that others may learn and benefit from your
>> issue.
>>
>> Microsoft engineers can only focus on one issue per thread. Although we
>> provide other information for your reference, we recommend you post
>> different incidents in different threads to keep the thread clean. In
doing
>> so, it will ensure your issues are resolved in a timely manner.
>>
>> For urgent issues, you may want to contact Microsoft CSS directly.
Please
>> check http://support.microsoft.com for regional support phone numbers.
>>
>> Any input or comments in this thread are highly appreciated.
>> ======================================================
>> This posting is provided "AS IS" with no warranties, and confers no
rights.
>>
>> --------------------
>> >Thread-Topic: HELP!!!!
>> >thread-index: AcWtAV2KjCko1sNIQ0KycdmmZ5Pu7w==
>> >X-WBNR-Posting-Host: 209.221.140.112
>> >From: "=?Utf-8?B?Tm9ydGh3ZXN0IFVwZ3JhZGVzIFBsdXM=?="
>> <andyn@xxxxxxxxxxxxxxxxxx(donotspam)>
>> >Subject: HELP!!!!
>> >Date: Mon, 29 Aug 2005 18:23:02 -0700
>> >Lines: 11
>> >Message-ID: <BD98B263-D239-4BDB-91FB-8E875BF4773C@xxxxxxxxxxxxx>
>> >MIME-Version: 1.0
>> >Content-Type: text/plain;
>> > charset="Utf-8"
>> >Content-Transfer-Encoding: 7bit
>> >X-Newsreader: Microsoft CDO for Windows 2000
>> >Content-Class: urn:content-classes:message
>> >Importance: normal
>> >Priority: normal
>> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>> >Newsgroups: microsoft.public.windows.server.sbs
>> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>> >Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>> >Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:148952
>> >X-Tomcat-NG: microsoft.public.windows.server.sbs
>> >
>> >
>> >-- I am not sure what happened, but after trying to set up Remote
Access
>> and
>> >restarting the Server, My client can no longer log in as Administrator.
We
>> >get the following error: "The Local Policy Of This System Does Not
Permit
>> You
>> >To Log On Interactively. What the heck happened and how do we fix.
>> >
>> >I tried to log in remotely to change password settings, but it will not
>> >allow me to. I keep getting the Login/Password and when I put in the
>> correct
>> >domain, username and password it keeps asking for it. Please advise if
>> there
>> >is another way to fix this, as my clients DHCP Server and everything is
>> down
>> >after trying to install remote access.
>> >
>>
>>
>

.



Relevant Pages

  • Re: Constrained delegation question!
    ... The event logs we need to know about are the ones on the server running the services you are controlling remotely. ... Can you show what happens when you have a console app that accesses the remote server running the services in terms of the security audits on the ... AUTHORITY\ANONYMOUS LOGON event. ... you won't be able to get Kerb delegation to ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Just administrator can access TS
    ... members of the Remote Desktop ... Event Source: Security ... Special privileges assigned to new logon: ... Microsoft MVP - Terminal Server ...
    (microsoft.public.windows.terminal_services)
  • RE: HELP!!!!
    ... I understand that users can not logon to the SBS ... server computer side) or when users logon the server using Remote Desktop ... The error "The local policy of this system does not permit you to log on ...
    (microsoft.public.windows.server.sbs)
  • Re: RWW - Local Policy connect to desktop issue
    ... Profile tab of user properties prior to the installation of Windows Server ... SP1 servers show 'deny this user permissions to log on to any terminal ... 'Allow logon to terminal server' and it is checked. ... Remote Desktop Users ...
    (microsoft.public.windows.server.sbs)
  • Re: Constrained delegation question!
    ... Normally when you see an anonymous login being attempted with NTLM, it is because the client did not attempt Kerberos authentication to access the remote server. ... If you can only get NTLM auth to the remote machine, you won't be able to get Kerb delegation to work. ... Successful Network Logon: ...
    (microsoft.public.dotnet.framework.aspnet.security)