Re: HELP!!! Unable to logon to Server 2000
From: Dave W (anonymous_at_discussions.microsoft.com)
Date: Mon, 27 Sep 2004 13:00:04 -0700
Just a thought here and I want to know what your opinion
is, from what I understand, Domain security settings over
ride local security settings. If that's true, then what if
I enable Domain level GP, making certain that those
particular logon rights are set correctly and thereby
superceding any local security settings that are
preventing a logon to that server?
>Just to add you may need to first install adminpak from
the install cdrom
>for Windows 2000 on your other computer first. It is
located in the I386
>folder. Also be sure to check for "deny logon locally "
user right entries
>as they will override any allow logon locally user right.
Keep in mind that
>administrators are part of the everyone and users group
>permissions - particularly deny permissions. --- Steve
>"Miha Pihler" <firstname.lastname@example.org> wrote in message
>> If you can connect to domain using Active Directory
Users and Computer
>> your computer then Right click Domain Controller OU.
>> Properties ->
>> Group Policy tab and click to select on Default Domain
>> Click on Edit.
>> In Group Policy Editor under Computer Configuration ->
Windows Settings ->
>> Security Settings -> Local Policies -> Users Rights
Assignment open Allow
>> log on locally (double click on this policy). Make sure
>> group is listed in this policy.
>> "Dave W" <email@example.com> wrote in
>>> I apologize for being vague.
>>> Yes, it is a DC with the only other 2000 server being
>>> PC that I use for a workstation, of sorts. The failed
>>> logon was with the Admin's account at the server's
>>> keyboard. However, I first received the message over
>>> weekend when I tried logging into a terminal session
>>> home over the weekend. This is the only machine in our
>>> network that this problem is happening on. I am
>>> that I accidentally changed a policy setting last week
>>> when I was trying to get a problematic application on a
>>> workstation to allow me to log on to it's service.
>>> >-----Original Message-----
>>> >Hi Dave,
>>> >You will have to give us more information.
>>> >Is this domain controller that you are trying to
>>> Did you try using
>>> >Administrator account. Did you try using terminal
>>> services to logon... Do
>>> >you have same problem on domain controllers, server
>>> >"Dave W" <firstname.lastname@example.org> wrote
>>> >> Some changes were made to group policy several days
>>> >> and something musta got screwed up because I cannot
>>> >> back in now that I have logged out. I get the
>>> >> message after the failed login: "the local policy of
>>> >> system does not permit you to logon interactively"
>>> >> Is there anything that I can do?