interactive access forbidden for administrator!

Question

Hi,
I can access to a win 2k3 sbs domain controller server as administrator from terminal server but not directly on the server consolle!
I get a message "The local policy of this system does not permit you to log-on interactively".

I've found this document
http://www.petri.co.il/logon_locally_user_right.htm
and I tried to go into control panel /administrative settings
Double-click Domain Controller Security Policy.
But I get a message stating that is "impossible to open criteria, insufficient permission", but I'm administrator.
what can I do?
Thanks.

jmwills · Answer

Try using the local admin account instead of your account.

Max_it · Answer

and how? in the combo box of login screen I have only the possibility to choice the domain, not the local machine. Thanks.

jmwills · Answer

The local Admin Account would be Administrator with the password you chose.  This is different from an account with Admin rights.

Max_it · Answer

I created a user named 'pippo' that belongs to group: -administrators (not domain administrator) -domain users -owner criteria group (i translated it from italian, I'm not sure) I can't still access to manage criteria in control panel. Perhaps shoul I remove membership from domain users for this user? thanks

jmwills · Answer

I had to go to my trusted source:   http://support.microsoft.com/default.aspx?scid=kb;en-us;841188

Max_it · Answer

YEAHHH! it works. I had nested some groups. Thank you very much

jmwills · Answer

We see that about 3 or 4 times a month at work and I had to remember wehere to look.  Glad it helped.

PowerEdge OS Forum

interactive access forbidden for administrator!

Was this post helpful?