Re: Administrator can't login interactively

Hi John:

Don't know what BE did to hose this, but it is usually a "deny" setting in
the policy settings.

From CSS:
To resolve this issue, remove the Administrator account from the Remote
Operators group and the Domain Power Users group. You also must remove any
group that contains the Administrator account from the Remote Operators
group and the Domain Power Users group.

For more detailed step,please refer to the following KB article.

"The local policy of this system does not permit you to logon
interactively" error message when you try to log on to a computer that is
running Windows Small Business Server 2003 by using an Administrator account

http://support.microsoft.com/kb/841188/en-us


This is because members of the SBS Remote Operators group (of which Power
Users are made a member of by default), are denied the Log on Locally
right. This "denied" permission will override other permissions set for the
user, even if you explicitly give the user Log on Locally rights.

You can use one of the following methods to allow the user(s) to logon the
server:

1. Remove the affected user(s) from the SBS Remote Operators group
membership.

2. Remove the SBS Remote Operators group from the "Deny log on locally"
policy in the Default Domain Controllers Policy Group Policy.

You can make this change either by connecting to the Windows Small Business
Server-based computer with a Remote Desktop connection or by installing the
Microsoft Windows Server 2003 Administration Tools Pack (Adminpak.msi) on a
Microsoft Windows XP Professional-based computer.

--
Larry


"John" <John@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:Or63NlsLIHA.5468@xxxxxxxxxxxxxxxxxxxxxxx
Hi

After installing BackupExec remote agent the server would not allow the
Administrator to login interactively giving the message to this effect.
Administrator can however login to the server remotely. What is the
problem and how can I fix it?

Thanks

Regards



.

Relevant Pages

  • RE: Unable to login interactivly even at Console
    ... remove the Administrator account from the Remote ... Operators group and the Domain Power Users group. ... running Windows Small Business Server 2003 by using an Administrator account ... This is because members of the SBS Remote Operators group (of which Power ...
    (microsoft.public.windows.server.sbs)
  • Domain Administrator Locked Out - Please Help!!!
    ... I have a Windows 2003 Server and a Windows 2000 Server which are ... If I right-click on Administrator within the Users and Computers MMC ... We had originally amended the Default Domain Policy (not a good idea I ... Later in the day it was discovered our domain Administrator account ...
    (microsoft.public.win2000.group_policy)
  • Re: Group Policy is now inhibiting the Administrator account
    ... Eventually found that a policy to ... the Admin account properties had REcommended ... Administrator account is a member of either of those groups. ... log on to the server with your own account. ...
    (microsoft.public.windows.server.sbs)
  • Re: Domain Administrator Locked Out - Please Help!!!
    ... Did you rename the administrator account? ... the policy to show "not configured". ... Settings, local policies, security options. ... When trying to logon on any workstation or server ...
    (microsoft.public.win2000.group_policy)
  • Re: shadow console connection through terminal connection on server 20
    ... | connection i'm trying to shadow is the administrator account. ... | while the server is joined ... local policy, and then they were overridden again by a policy ...
    (microsoft.public.windows.terminal_services)