Re: The local policy of this system does not permit you to logon i

Hi Matt

Here is my original post (sorry for the duplication)

1) We were asked to look at a SBS 2003 server & found that the group policy
has somehow been altered & we decided to do a complete re-install of the
system. We did a standard install & everything appeared to be running
correctly for about the last month or so we thought, though we had not
rebooted the server at all since we rebuilt it.

2) As this company had no backup device we purchased & shut the server down
& then fitted backup device & brought server up only to find we could not
login to the SBS server using the admin UID & PWD. I started to panic at
this stage as the error given is as follows:-

"the local policy of this system does not allow you to logon interactively"

After checking for this error I followed this guide

http://support.microsoft.com/kb/841188

did not work for me though from the article above I found it was possible to
login to the SBS via RDP & I could use the admin UID & PWD!!

even though I could login the via RDP the problems don't end there as if I
try to run a program using the "run as" command I receive an error advising
:-

"Logon Failure: the user has not been granted the requested logon type at
this computer"

I guess this is because the administrator cannot log on so I then checked
the local policy by running secpol.msc and then checked Security
Settings->Local Policies->User Rights Assignment->Log on Locally

the administrator is already there though I did note that you can not
add/remove any groups

I then checked the Domain Controller Security Policy & checked that the
administrator was allowed to "log on locally" & it is there so I am a little
stumped as to the cause & was hoping someone has been through this before
who can assist

I have also created an additional account with the admin template but I
continue to recevie this error

Any help appreciated

Paul

Thanks in advance

"Matabra" <Matabra@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:E13FCAED-AA9C-4839-8D42-BCC4C54506F1@xxxxxxxxxxxxxxxx
Franky,

Are you having the problem with the domain admin account or another
account
trying to log onto the server?

Matt

"Franky" wrote:

Hi

I am experiencing exactly this problem & have found no resolution to this
as
of yet

Les has given me some guides to follow though you may want to try the
following guide

http://support.microsoft.com/kb/841188

Hope this helps

Paul

"MSExchangeStudent" <exchangestudent@xxxxxxxxxxxxxx> wrote in message
news:u1nge9vmIHA.5084@xxxxxxxxxxxxxxxxxxxxxxx

"Matabra" <Matabra@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:3339FAC5-27A7-4B2B-83B6-479E2A2E7FCD@xxxxxxxxxxxxxxxx
The reason for this is that he is trying to log directly onto the
server.
He
will need to be given the "allowed to log on interactively" right

Ok, i will do that.Thanks

I assume this is related to your earlier post.. Do you trust this
person?
if
so, give him Domain Admin rights for long enough to install his app,
then
remove him from that group.
I did that in the meanwhile while waiting for your reply and you
confirm
the same. 100%. thanks you very much

Depends also whether this is a production network or test network, and
what
security policies are in place.

"MSExchangeStudent" wrote:

A user get this when trying to log on directly onto the server with
his
credentials but when i use the exact same credentials and log in via
RDC
from a different location i can get in.

He is allready granted "Allow logon throught terminal
services...right"?
Why is this happening?









.

Relevant Pages

  • Re: Allowing Mac OSX to connect to shares
    ... Thanks for using the SBS newsgroup. ... I understand that the Mac client workstations can not ... F. Enter the IP address of the server in the WINS server field. ... Expand Group Policy Management. ...
    (microsoft.public.windows.server.sbs)
  • Re: Allowing Mac OSX to connect to shares
    ... > access shared resources on the SBS server box. ... The SBS policy objects will display in the ... > Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Move W2K3 server to its own OU seperate from SBS (MyBusiness) OU
    ... inherit it's GPO from the SBS server. ... Policy is applied in order, Local, Site, Domain, OU. ... safe and sure is where do I filter these two policies? ...
    (microsoft.public.windows.server.sbs)
  • Re: Administrator Profile corruption
    ... To clear up a few things: On the Friday I rebooted the server and things got ... Administrator logon to see which group policy objects are applied?’ ... concluded that the admin account was completely toasted. ... We ran the user profile Cleanup Hive Service. ...
    (microsoft.public.windows.server.sbs)
  • Re: Terminal Server logon problem
    ... I upgraded our current SBS 2003 box to new hardware using SBSMigration.com's ... When it was time to bring the old SBS server offiline and make ... I am getting a group policy error - You do not have permissions to ... The only thing I thought I changed was taking the administrators account ...
    (microsoft.public.windows.server.general)
Loading