interactive access forbidden for administrator!

Question

Hi, I can access to a win 2k3 sbs domain controller server as administrator from terminal server but not directly on the server consolle! I get a message 'The local policy of this system does not permit you to log-on interactively'. I've found this document http://www.petri.co.il/logon_locally_user_right.htm and I tried to go into control panel /administrative settings Double-click Domain Controller Security Policy. But I get a message stating that is 'impossible to open criteria, insufficient permission', but I'm administrator. what can I do? Thanks.

jmwills · Answer

Try using the local admin account instead of your account.

Max_it · Answer

and how? in the combo box of login screen I have only the possibility to choice the domain, not the local machine. Thanks.

jmwills · Answer

The local Admin Account would be Administrator with the password you chose.  This is different from an account with Admin rights.

Max_it · Answer

I created a user named 'pippo' that belongs to group: -administrators (not domain administrator) -domain users -owner criteria group (i translated it from italian, I'm not sure) I can't still access to manage criteria in control panel. Perhaps shoul I remove membership from domain users for this user? thanks

jmwills · Answer

I had to go to my trusted source:   http://support.microsoft.com/default.aspx?scid=kb;en-us;841188

Max_it · Answer

YEAHHH! it works. I had nested some groups. Thank you very much

jmwills · Answer

We see that about 3 or 4 times a month at work and I had to remember wehere to look.  Glad it helped.

PowerEdge OS Forum

Was this post helpful?