Unable to login to SBS Server

Hi

I am hoping someone can help as this is really causing us some concern,
shall I start at the beginning

1) We were asked to look at a SBS 2003 server & found that the group policy
has somehow been altered & we decided to do a complete re-install of the
system. We did a standard install & everything appeared to be running
correctly for about the last month or so we thought, though we had not
rebooted the server at all since we rebuilt it.

2) As this company had no backup device we purchased & shut the server down
& then fitted backup device & brought server up only to find we could not
login to the SBS server using the admin UID & PWD. I started to panic at
this stage as the error given is as follows:-

"the local policy of this system does not allow you to logon interactively"

After checking for this error I followed this guide

http://support.microsoft.com/kb/841188

did not work for me though from the article above I found it was possible to
login to the SBS via RDP & I could use the admin UID & PWD!!

even though I could login the via RDP the problems don't end there as if I
try to run a program using the "run as" command I receive an error advising
:-

"Logon Failure: the user has not been granted the requested logon type at
this computer"

I guess this is because the administrator cannot log on so I then checked
the local policy by running secpol.msc and then checked Security
Settings->Local Policies->User Rights Assignment->Log on Locally

the administrator is already there though I did note that you can not
add/remove any groups

I then checked the Domain Controller Security Policy & checked that the
administrator was allowed to "log on locally" & it is there so I am a little
stumped as to the cause & was hoping someone has been through this before
who can assist

Thanks in advance

Paul


.

Relevant Pages

  • Re: Please help refresh my memory on AD DC
    ... When I boot my Laptop I reach the Logon screeen for XP Laptop and here I am ... administrator account. ... account to be able to Login so I can control it from the DC. ... A Server has websites already hosted on it in a Workgroup and now I join it ...
    (microsoft.public.windows.server.active_directory)
  • Re: Please help refresh my memory on AD DC
    ... "WEB308\administrator" does not longer exist, because DC's have no local administrator. ... The computer is now member of the domain, if you mean this and still has the local user account. ... "in order to add the server or pc I would have to have a user on the domain to logon to the domain. ... To Logon locally I would use the admin account of the Server 2003 machine. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Please help refresh my memory on AD DC
    ... they just get the result of that what the domain administrator ... They however cannot logon directly to the physical DC machine. ... administrator account. ... A Server has websites already hosted on it in a Workgroup and now I ...
    (microsoft.public.windows.server.active_directory)
  • Re: Please help refresh my memory on AD DC
    ... The users will not see anything of that basically, they just get the result of that what the domain administrator or equivalent configures there. ... They however cannot logon directly to the physical DC machine. ... administrator account. ... A Server has websites already hosted on it in a Workgroup and now I ...
    (microsoft.public.windows.server.active_directory)
  • Re: Remote Desktop Logon to Server
    ... User Rights assignments under Local Policies. ... > person to logon to the server in a restricted mode. ... > change (this was before I put them into the Administrator ...
    (microsoft.public.win2000.networking)