Re: administrator unable to logon interactively

From: neo [mvp outlook] (neo@mvps.org)
Date: 10/21/02 

From: "neo [mvp outlook]" <neo@mvps.org>
Date: Sun, 20 Oct 2002 15:59:31 -0700

If you can't bring on a Windows 2000 member workstation/server and install
the adminpak tools on it, then you can try the RC1 .NET server release
AdminPak on your WinXP box. Just keep in mind that you are playing with
beta software in trying to manage a production domain.

http://www.microsoft.com/downloads/release.asp?ReleaseID=34032

ps - please make sure you read the kb article mentioned in the first
paragraph.

"praks25" <praks25@aol.com> wrote in message
news:395401c27879$67bada70$39ef2ecf@TKMSFTNGXA08...
> All domain clients and workstations run the Windows XP
> professional OS as per the requests of the employees. the
> only computers running windows 2000 AS is the primary
> domain controller and the secondary domain controller.
> >-----Original Message-----
> >Have you tried installing the administrative pack on a
> windows 2000 member
> >server/workstation and modify the domain policy from
> there?
> >
> >"praks25" <praks25@aol.com> wrote in message
> >news:748001c27700$a0dfebd0$3bef2ecf@TKMSFTNGXA10...
> >> A member of the administrators group accidentally
> removed
> >> the "administrators" group from rights to logon
> >> interactively in the "domain controller policy settings"
> >> at the domain controller. this was immediately
> replicated
> >> to the secondary domain controller and no one in the
> >> administrators group including the administrator can
> logon
> >> to the primary domain controller or the secondary domain
> >> controller.
> >> the message received at logon attempts is this
> >> " the group policy of this system does not allow you to
> >> logon interactively"
> >> Is there anyway to fix this problem?
> >> Since the administrator cannot logon interactively the
> >> domain cannot be administered.
> >> any help would be appreciated
> >> thank You
> >> praks25
> >
> >.
> >

Relevant Pages

  • Re: OU Administrator setup/Admin Shares
    ... My mistake on the Windows 2000 PC, it was not a member of my test OU. ... The $ shares are shared out to local administrators ... Create the gpo in the ou where the Computers reside, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Administrator cant change security
    ... administrators group on the domain member can configure permissions on any ... computers can not reliably contact a domain controller. ... I'm signing on as Administrator on a second Windows 2003 server that is ...
    (microsoft.public.windows.server.security)
  • Re: administrator unable to logon interactively
    ... All domain clients and workstations run the Windows XP ... domain controller and the secondary domain controller. ... >> administrators group including the administrator can ...
    (microsoft.public.win2000.security)
  • Re: Network Administrative Privelages
    ... I have a Windows 2003 R2 member server on a Windows 2000 native domain. ... administrators to do everything, however, as for my Windows 2003 R2 ...
    (microsoft.public.windows.server.active_directory)
  • Re: Terminal Services (Administration mode) Security
    ... users local administrators to allow then to logon locally and that could ... Do that in Local Security Policy for a domain member and you ... >> domain controller you may want to put in a child OU to the domain ...
    (microsoft.public.win2000.security)