Re: Log on Locally

From: R. W. (blwr100@hotmail.com)
Date: 07/19/02 

From: "R. W." <blwr100@hotmail.com>
Date: Fri, 19 Jul 2002 11:08:45 -0700

I think I may have done the same thing. When you say,
logon as the local administrator, do you mean log on to
the DC as local admin? How? We've only got one domain
choice to log in to...but there is a mirror, and I've
tried logging on there, but I get the same message.

However, I can logon as local and domain admin to the
clients we've got hooked up. Does that help me?

>-----Original Message-----
>Log on as local administrator and fix the issue
>
>
>"Christophe Cornil" <cco@clear2pay.com> wrote in message
>news:#DBMo7zLCHA.2052@tkmsftngp08...
>> Hi all,
>>
>> I'm in a deep sh***
>>
>> I made a mistake when configuring the Domain Controller
Policy.
>>
>> Instead of giving the access to the network and th log
on locally to the
>> Domain admin group, I didn't check very well and I add
Domain admins to
>the
>> following policies: Deny log on locally, deny access to
this computer from
>> the network.
>>
>> The problem now is, I can't connect to my Domain
controllers.... and I
>CAN'T
>> change anymore my settings in the policy snap-in... I
have an access
>denied!
>> I tried with the ntrights.ex as described here:
>> http://support.microsoft.com/search/preview.aspx?
scid=kb;en-us;Q279664
>> with this exact command: ntrights -u Domain Admins -m
\\machinename -r
>> SeDenyInteractiveLogonRight
>>
>> but it seems Domain Admins is not the rights word to
use because I have
>this
>> error message
>>
>> Revoking SeDenyInteractiveLogonRight from Domain ...
failed
>> (GetAccountSid(Domain)=1332
>>
>> Anyway, I don't think I have the right to change it
>>
>> PLease need a lot of help.
>>
>> Thansk in advance
>>
>>
>
>
>.
>

Relevant Pages

  • Re: Admin Rights on Client
    ... Log in to the client as the local Administrator and password, set the domain window to the machine's name before clicking OK. ... You will be prompted to provide your domain admin ... Subject: Admin Rights on Client ...
    (microsoft.public.windows.server.sbs)
  • Re: Permissions
    ... should not need to give them domain admin group membership but instead give ... them local administrator access to the server where the application is. ... modify, ntfs permissions, registry permissions, and possibly user rights to ...
    (microsoft.public.security)
  • Re: Local admin rights.
    ... Try using the gpresult command at a command prompt to see what your group ... I joined the domain with my domain admin account and then logged off. ... account to the local administrator group. ...
    (microsoft.public.windowsxp.general)
  • Re: Problem with Win2003 member server
    ... are you sure that you are logged on as a domain admin ... and not the local administrator? ... the member server that you are attempting to connect to. ... This alias is for newsgroup purposes ...
    (microsoft.public.windows.server.general)
  • Re: Administrator
    ... domain admin group has to be added ... > to the local administrator group for each server. ...
    (microsoft.public.sharepoint.portalserver)