Cannot logon locally at the console

I have a user that is a member of the domain admin group and the local
administrators group, both of which have local logon rights. His own
account does as well. Yet he is still being told that he cannot logon
locallay to this machine? What am I missing?

-Jim

Well, I would tell him the same thing. Users should not be logging in to
the server.

But more importantly, what is the error message, and what do you see in the
event logs, and what additional groups is this user a member of?

--
Larry
Please post the resolution to your
issue so that others may benefit.


"jtpryan" <jtpryan@gmail.com> wrote in message
news:ad1b5ac8-574b-444e-8176-88ea0cff281b@v15g2000yqn.googlegroups.com...
>I have a user that is a member of the domain admin group and the local
> administrators group, both of which have local logon rights. His own
> account does as well. Yet he is still being told that he cannot logon
> locallay to this machine? What am I missing?
>
> -Jim

Any help here Jim?

"The local policy of this system does not permit you to logon interactively"
error message when you try to log on to a computer that is running Windows
Small Business Server 2003 by using an Administrator account
http://support.microsoft.com/kb/841188

--
Merv Porter [SBS-MVP]
============================

"jtpryan" <jtpryan@gmail.com> wrote in message
news:ad1b5ac8-574b-444e-8176-88ea0cff281b@v15g2000yqn.googlegroups.com...
>I have a user that is a member of the domain admin group and the local
> administrators group, both of which have local logon rights. His own
> account does as well. Yet he is still being told that he cannot logon
> locallay to this machine? What am I missing?
>
> -Jim

Hello Jim,

Thank you for posting here.

According to your description, I understand that:

A user that is a member of the domain admin group and the local
administrators group cannot logon to the SBS server locally.

If I have misunderstood the problem, please don't hesitate to let me know.

Suggestions:
=================
In Windows Small Business Server 2003, the "Deny log on locally" policy
setting is applied to the Remote Operators group in the Default Domain
Controllers Group Policy object. This policy setting also applies to the
Domain Power Users group because the Domain Power Users group is a member
of the Remote Operators group. Because a Deny permission overrides an Allow
permission, this policy setting prevents users from logging on to the SBS
server, even if the "Allow log on locally" policy applies to those same
users.


To resolve this issue, you may try to check how it works if you remove the
Administrator account from the Remote Operators group and the Domain Power
Users group.


You may check KB 841188 for more detailed information:

"The local policy of this system does not permit you to logon
interactively" error message when you try to log on to a computer that is
running Windows Small Business Server 2003 by using an Administrator account
http://support.microsoft.com/kb/841188

Hope this helps. Also, if you have any questions or concerns, please do not
hesitate to let me know.





Best regards,

Miles Li
Microsoft Online Newsgroup Support

==================================================================
Please post your EBS related questions to the EBS newsgroup on Connect
website:
https://connect.microsoft.com/ebs08/...i/default.aspx


If you want to use a newsreader other than a web forum to access these
newsgroups,
please refer to the following blog to apply NNTP password and configure a
newsreader:
http://msmvps.com/blogs/bradley/arch...for-the-sbs-20
08-newsgroups.aspx
==================================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
==================================================================

On Apr 22, 6:19*am, v-mil...@online.microsoft.com (Miles Li [MSFT])
wrote:
> Hello Jim,
>
> Thank you for posting here.
>
> According to your description, I understand that:
>
> A user that is a member of the domain admin group and the local
> administrators group cannot logon to the SBS server locally.
>
> If I have misunderstood the problem, please don't hesitate to let me know..
>
> Suggestions:
> =================
> In Windows Small Business Server 2003, the "Deny log on locally" policy
> setting is applied to the Remote Operators group in the Default Domain
> Controllers Group Policy object. This policy setting also applies to the
> Domain Power Users group because the Domain Power Users group is a member
> of the Remote Operators group. Because a Deny permission overrides an Allow
> permission, this policy setting prevents users from logging on to the SBS
> server, even if the "Allow log on locally" policy applies to those same
> users.
>
> To resolve this issue, you may try to check how it works if you remove the
> Administrator account from the Remote Operators group and the Domain Power
> Users group.
>
> You may check KB 841188 for more detailed information:
>
> "The local policy of this system does not permit you to logon
> interactively" error message when you try to log on to a computer that is
> running Windows Small Business Server 2003 by using an Administrator accounthttp://support.microsoft.com/kb/841188
>
> Hope this helps. Also, if you have any questions or concerns, please do not
> hesitate to let me know.
>
> Best regards,
>
> Miles Li
> Microsoft Online Newsgroup Support
>
> ==================================================================
> Please post your EBS related questions to the EBS newsgroup on Connect
> website:https://connect.microsoft.com/ebs08/...n/richui/defau...
>
> If you want to use a newsreader other than a web forum to access these
> newsgroups,
> please refer to the following blog to apply NNTP password and configure a
> newsreader:http://msmvps.com/blogs/bradley/arch...ing-up-for-the...
> 08-newsgroups.aspx
> ==================================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ==================================================================
> This posting is provided "AS IS" with no warranties, and confers no rights.
> ==================================================================

OK, I found that "domain users" is acually a member of "remote
operators". I removed the user from the "domain users" group and he
will test it this afternoon.

Thank you for all the replies.

-Jim

Hello Jim,

Thanks for the update.

Please take your time to have the test. If you have any questions or
concerns, please do not hesitate to let me know. I will follow up as soon
as possible.



Best regards,

Miles Li
Microsoft Online Newsgroup Support

==================================================================
Please post your EBS related questions to the EBS newsgroup on Connect
website:
https://connect.microsoft.com/ebs08/...i/default.aspx


If you want to use a newsreader other than a web forum to access these
newsgroups,
please refer to the following blog to apply NNTP password and configure a
newsreader:
http://msmvps.com/blogs/bradley/arch...for-the-sbs-20
08-newsgroups.aspx
==================================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
==================================================================