Administrator unable to log on Interactively

From: praks25 (praks25@aol.com)
Date: 10/22/02 

From: "praks25" <praks25@aol.com>
Date: Tue, 22 Oct 2002 13:21:58 -0700

As mentioned in my post of october 17th, the
administrator is not able to log on interactively. I
tried to undo the damage according to the suggestions
given but to no avail.
I am one among a few administrators and just cannot log
on to the primary domain controller. I tried using
the "net use" command to logon to the C drive of the
domain controller to edit the "secedit.sdb" file, through
one of the computers in the domain after I logged in as
administrator of the domain on that machine. I get an
error stating the following
"Logon failure: The user has not been granted the
requested logon type at this computer"
I Installed the adminpak for the WinXP pro client
machines in the domain, but I cannot access any of the
domain services like "Active directory users and
computers and so on" I get the following error
"Naming Information cannot be located because:
The logon attempt failed
Contact the System administrator to verify that your
domain is properly configured and is currently online"
I cannot add any new workgroup computer to the domain as
it gives me an error stating that the user does not have
the rights to log onto system.
Besides the new admin pak for WinXP pro does not have
the "domain controller security policy" service nor does
it have the "domain security policy" service.
Any help in trying to resolve this issue would be
appreciated. I have a secondary controller, but since the
admin has no logon rights I cannot even replicate the
active directory and make the secondary as primary and
reinstall the primary.
Will NTRights.exe work to have this fixed. this is about
the only thing I have not yet tried.
Thankyou

Relevant Pages

  • Re: Custom rights
    ... By default any user can log onto a server other than domain controller. ... allow then to logon to a domain controller give them the logon locally user ... To add computers to the domain go to AD Users and Computers. ... > Look into AD delegation, though you may need to do some custom delegation. ...
    (microsoft.public.win2000.security)
  • Re: Domain Password Security
    ... accounts need to use complex passwords and minimum of ntlmv2 should be used for lan ... Services Client and configuring authentication level on Domain Controller Security ... controllers if you have all W2K/XP computers. ... I also recommend you enable auditing of account logon and logon ...
    (microsoft.public.win2000.security)
  • Re: Domain Password Security
    ... Domain Controller Security ... >controllers if you have all W2K/XP computers. ... >administrator accounts only when needed to, ... account logon and logon ...
    (microsoft.public.win2000.security)
  • Re: Unsharing Printers
    ... computers. ... What needs to be done is to logon as administrator and access the security ... In a WinXP Home system you have to logon in Safe mode for this. ... Once on the security tab, you need to remove print permissions for everyone, ...
    (microsoft.public.windowsxp.newusers)
  • Re: administrator unable to logon interactively
    ... Windows 2000 domain controller. ... note that the deny interactive logon permission ... so that if the Administrator is in a group like Everyone ...
    (microsoft.public.win2000.security)