Re: Unable to login to SBS Server

This is often caused by the Administrator account being added to security groups that it shouldn't be added to. Like remote users group, for example.

--
Les Connor [SBS MVP]
________________________
Get the SBS BPA here:
http://support.microsoft.com/kb/940439/en-us


"Franky" <frankie_600@xxxxxxxxxxxxx> wrote in message news:hvSdnfu8RJAa1mbanZ2dnUVZ8qOknZ2d@xxxxxxxxx
Hi

I am hoping someone can help as this is really causing us some concern, shall I start at the beginning

1) We were asked to look at a SBS 2003 server & found that the group policy has somehow been altered & we decided to do a complete re-install of the system. We did a standard install & everything appeared to be running correctly for about the last month or so we thought, though we had not rebooted the server at all since we rebuilt it.

2) As this company had no backup device we purchased & shut the server down & then fitted backup device & brought server up only to find we could not login to the SBS server using the admin UID & PWD. I started to panic at this stage as the error given is as follows:-

"the local policy of this system does not allow you to logon interactively"

After checking for this error I followed this guide

http://support.microsoft.com/kb/841188

did not work for me though from the article above I found it was possible to login to the SBS via RDP & I could use the admin UID & PWD!!

even though I could login the via RDP the problems don't end there as if I try to run a program using the "run as" command I receive an error advising
:-

"Logon Failure: the user has not been granted the requested logon type at this computer"

I guess this is because the administrator cannot log on so I then checked the local policy by running secpol.msc and then checked Security Settings->Local Policies->User Rights Assignment->Log on Locally

the administrator is already there though I did note that you can not add/remove any groups

I then checked the Domain Controller Security Policy & checked that the administrator was allowed to "log on locally" & it is there so I am a little stumped as to the cause & was hoping someone has been through this before who can assist

Thanks in advance

Paul


.

Relevant Pages

  • RE: Cant set Local Security policies. They fail to save
    ... I followed your instructions on applying the predefined security templates. ... I still can’t set any of the local security policies on the server box. ... > using local Administrator account to test, ... >>> member of either the Remote Operators group or the Domain Power Users ...
    (microsoft.public.windows.server.sbs)
  • Re: Security Logon/Logoff Events
    ... the full security audit is enabled by default so that you are ... Right-click Small Business Server Auditing Policy and click Edit. ... SBS 2003 creates a GPO on the DC container named Small Business Server ...
    (microsoft.public.windows.server.sbs)
  • RE: Logon Issue - could someone explain please
    ... I understand that you get security event 540 ... When a user connects to the shared folder on the SBS server, ... logon auditing, ...
    (microsoft.public.windows.server.sbs)
  • Re: Security experts criticize an SBS installation
    ... If I had a dime every time some two bit "security expert" thought Microsoft products were insecure I'd have a lot of dimes and a lot of folks that haven't looked at Microsoft products since WinNT. ... I have a GSEC security credential, volunteer for the Center for Internet Security and know that my security of my network is based more on the lack of control of my workstations than it is with that ISA box. ... I cannot, to the best of my knowledge, remember a SBS box that has been hacked when the passwords are long/strong/secure, the box is patched, and the workstations are configured based on the risk of each person. ... But a SBS server ..even with that "so called" hacked in umpteen minutes ISA server ...Get him to tell you in details how he hacked into ISA server. ...
    (microsoft.public.windows.server.sbs)
  • Re: FOR A SKILLED IT EXPERT - WIN2K SERVER - DOMAIN CONTROLLER
    ... After installing a parallel copy of WIN2K SERVER, ... Administrator access in Directory Services Restore Safe Mode. ... This reset the local policy back to ... manual security reset. ...
    (microsoft.public.win2000.security)