RE: Unable to login interactivly even at Console

Hi Bryan,

Thanks for posting here.

From the description, I understand the issue is that you cannot logon
interactively by using Administrator account. If I am off base, please
don't hesitate to let me know.

To resolve this issue, remove the Administrator account from the Remote
Operators group and the Domain Power Users group. You also must remove any
group that contains the Administrator account from the Remote Operators
group and the Domain Power Users group.

For more detailed step,please refer to the following KB article.

"The local policy of this system does not permit you to logon
interactively" error message when you try to log on to a computer that is
running Windows Small Business Server 2003 by using an Administrator account

http://support.microsoft.com/kb/841188/en-us


This is because members of the SBS Remote Operators group (of which Power
Users are made a member of by default), are denied the Log on Locally
right. This "denied" permission will override other permissions set for the
user, even if you explicitly give the user Log on Locally rights.

You can use one of the following methods to allow the user(s) to logon the
server:

1. Remove the affected user(s) from the SBS Remote Operators group
membership.

2. Remove the SBS Remote Operators group from the "Deny log on locally"
policy in the Default Domain Controllers Policy Group Policy.

You can make this change either by connecting to the Windows Small Business
Server-based computer with a Remote Desktop connection or by installing the
Microsoft Windows Server 2003 Administration Tools Pack (Adminpak.msi) on a
Microsoft Windows XP Professional-based computer.


Hope this helps


I appreciate your time. I am happy to be of assistance and look forward to
your reply.

Have a nice day!

Best regards,

Jacky Luo (MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
====================================================
PLEASE NOTE: The partner managed newsgroups are provided to
assist with break/fix issues and simple how to questions.
We also love to hear your product feedback! Let us know what you think by
posting

from the web interface: Partner Feedback
from your newsreader: microsoft.private.directaccess.partnerfeedback.

We look forward to hearing from you!
====================================================
When responding to posts, please "Reply to Group" via your newsreader
so that others may learn and benefit from this issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
====================================================

.

Relevant Pages

  • Re: Administrator cant login interactively
    ... remove the Administrator account from the Remote ... "The local policy of this system does not permit you to logon ... running Windows Small Business Server 2003 by using an Administrator account ... This is because members of the SBS Remote Operators group (of which Power ...
    (microsoft.public.windows.server.sbs)
  • Re: AD error
    ... I'm glad to know you could logon server and change user settings. ... Log on SBS server with original Administrator account. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: SBS_Database_Cleanup Failed
    ... Could you please let me know how I launch SQL Enterprise Manager. ... > Hi Alexander, ... > You can either manually rename the Administrator account on the computer ... > Administrator account names in the network (including the server). ...
    (microsoft.public.windows.server.sbs)
  • Re: iis lockdown & admin logout
    ... and I was told that if you used the administrator account as ... it would be good to "re-run" the IIS lockdown tool. ... revert settings to default settings before ... it's just running NT4 Server + latest IIS Lockdown ...
    (microsoft.public.inetserver.iis.security)
  • RE: Recovery console password problem
    ... The passwords of the server I ... It is kinda the problem WinXP has with recovery console and password. ... a Windows update, btw). ...
    (microsoft.public.windows.server.general)
Loading