The local policy of this system doe not permit you to log on interactively

From: Tom Celica (jhonda@juno.com)
Date: 01/31/03 

From: "Tom Celica" <jhonda@juno.com>
Date: Fri, 31 Jan 2003 21:18:44 GMT

WIN2K Native Domain with some XP Clients.

The user Administrator of our Domain is faced with the problem that he
cannot log on
to some of the Servers on our Domain. He Cannot log onto either of the
Domain Controllers. But he can log onto both nodes of a Win2K Database
Cluster. But he cannot log onto another WIN2K Server in our Network. He
Can log onto my XP-Pro laptop.
There are NO Domain Group Policies Defined. And the Local Policy is
appropiately allowing the Domain\Administrator to log on locally. I have
read some threads that say check that the Local Policy - "log on locally"
should include the "Domain Users" group, and the Administrator is a member
of the "Domain Users" The Administtrator is
also a member of these groups:

   MYDOMAIN\Domain Admins
  MYDOMAIN\Domain Users
  MYDOMAIN\Enterprise Admins
  \Everyone
  MYDOMAIN\Exchange Services
  MYDOMAIN\Group Policy Creator Owners
  MYDOMAIN\Schema Admins

...All of a sudden this morning the Administrator was unable to log on
interactively to the DC's and some of the Servers???

Does anyone have any Ideas?

For reserve...I did create additonal users who are members of the same
Administrative groups that the Administrator is... just for protection.

thanks
-tom

Relevant Pages

  • Re: Login as local admin
    ... So if i basically ensure that my domain administrator account is a member of ... the schema admins, and enterprise admins, and login using these credentials, ... The article does not reference "local" administrator (as far as I ... If you choose to use an account other than the built-in administrator ...
    (microsoft.public.windows.server.sbs)
  • Re: I shot my foot off almost and the Admin cant log into the server locally
    ... server. ... Keep a backup administrator id around. ... > By default the Administrator should be a member of these groups: ... > Administrators, Domain Admins, Domain Users, Enterprise Admins, Group ...
    (microsoft.public.windows.server.sbs)
  • Re: Interactive Logon problem on Server
    ... If you checked Gp Policy and you are correct that you have ... have member groups that aren't supposed to be there. ... > Enterprise Admins ... >> Logon Remotely and open the User account for Administrator and be sure ...
    (microsoft.public.windows.server.sbs)
  • Re: Local user privileges
    ... member of the power users or administrators. ... If he can create admins, then he is a member of the local admin group. ... or if you made the dom-user account a local administrator. ...
    (microsoft.public.win2000.group_policy)
  • Remote Management Access Denied
    ... correct group, but frankly I'm pulling my hair out with this one. ... Win2K Server running all latest critical updates and service packs. ... On all PC's the network administrator has been added to the local ... Could it be an image problem with the xp from Dell? ...
    (microsoft.public.windowsxp.security_admin)