Solved

LOGIN Failure  Windows 2003 SB Server

Posted on 2004-03-30
6
500 Views
Last Modified: 2010-04-19
When putting in the Administrator with the correct password...on the server...

I am getting the following error..now this is from memory

"policy will not allow interactive logins"

Please help
0
Comment
Question by:tvacc
  • 2
  • 2
  • 2
6 Comments
 
LVL 57

Expert Comment

by:Pete Long
Comment Utility
you have a policy that is denying "Log on Locally" and have applied it to either the administrators or everyone group
0
 
LVL 44

Expert Comment

by:CrazyOne
Comment Utility
Did you push the ok button and then cntil+alt+delete
0
 

Author Comment

by:tvacc
Comment Utility
Is there I way around this...

Last time we were on the server console...we set up the backup...and attempted to install remote access...but then uninstalled the remote access..


but later that day I went in and set the backup to go off later that night...

I am going over to the server in about an 1.5 hour...will see it for myself. I am getting this from the president of the company who was tryinng to log inot the server console to retrieve a file...
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 
LVL 44

Accepted Solution

by:
CrazyOne earned 500 total points
Comment Utility
http://www.itpoints.com/bbs/NonCGI/Forum2/HTML/000139.html

I'm an idiot. I forgot to set the domain security policy inside of administrative tools. This might help someone else!
==============

We just had this problem. All W2K machines refused logon either locally or to the domain with the message Local security policy will not allow interactive logon. NT4 and XP clients were not affected, W2K machines which had not been logged off overnight were not affected. The Servers themselves (W2K) were not affected. Rebooting an unaffected W2K client caused it to develope the problem.
The fault turned out to be that the previous day we had authorised one user to logon interactively to the server and added his name to the domain security policy for interactive logon. This seems to have then disabled access for all other users including Administrator on W2K machines. Removing the username and rebooting clients restored the system to normal.
==================

quote:
--------------------------------------------------------------------------------
Originally posted by Arash:
Administrative Tools>Domain Controller Security Policy>Security Settings>Local Policies>User Rights Assignment>Policy>Log on Locally>Add>Browse, click the appropriate group, and then click Add.
After modifying the Group Policy, type secedit /refreshpolicy machine_policy /enforce at a command prompt, press ENTER, and then press ENTER.


That solved MY problem.
========================

from the administrative tools choose domain controller security policy
windows setting
security setting
local policies
user rights assignment
log on locally
you should add interactive
0
 
LVL 57

Expert Comment

by:Pete Long
Comment Utility
if its every machine in the nework then its at GPO or domain level if its just one server its in the local policy.

0
 

Author Comment

by:tvacc
Comment Utility
thank you, it worked. just for anyone's information here (perhaps stumbling across this with the same problem I had)...

secedit /refreshpolicy machine_policy /enforce

is replaced by gpupdate with windows 2003 server
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now