Solved

Could changing the admins password cause The local policy of this system not permit you to logon interactively

Posted on 2004-10-21
175 Views
Last Modified: 2010-04-14
Story line:

A user of a remote 2k server was in the sharing and security settings of a server I manage remotely
I know this because when I did a remote admin into the system I caught them red handed,, grin

To prevent any further tampering with its security I took control and changed the administrators password
Changes were accepted with no warnings or errors.

I logged off the server and called the company to bitch. :)

Once my point was taken I tried to log beck into the server and I now get

“The local policy of this system does not permit you to logon interactively” Major Bummer!

After several attempts to login the system was restarted and windows changed what looked like every files security settings, it took 5 to 10 min to complete.

There network is back up but the server is running with out a driver,,, NO ONE had local login rights but the admin. And now the admin is out!

Questions:

 Could changing the admins pw cause this?

TIA
0
Question by:5thcav
    7 Comments
     
    LVL 95

    Assisted Solution

    by:Lee W, MVP
    I've seen similar things, but for me, reboots solved it.
    0
     
    LVL 7

    Author Comment

    by:5thcav
    It just seems very strange and highly unlikely by changing the PW would remove the admin from the local login especially when i caught a clueless employee in the user security settings via a remoteAdmin visit.
    What timing! They won’t pay for me to come in a fix it. :)
    0
     
    LVL 5

    Expert Comment

    by:snowsurfer
    What happened sounds like someone was messing with the local security policy.  You can set the machine to reboot after several failed attempts, this is to prevent a TSR program to load and bang away with dictionary attacks.  
    0
     
    LVL 7

    Author Comment

    by:5thcav
    o dont think so, the server fully boots to the login screen where no uses even the admin have local login rights
    i made sure only the admin could localy log into the servers desktop prior to the user removing the admin rights.

    the office had the admins login id and password,  they used that to login localy. come to find out they had the security sheet next to the server.
    0
     
    LVL 7

    Author Comment

    by:5thcav
    in any case i told them i would try and fix it using ntrights.exe from a remote login with the admin account for free and told them to find another admin for the 6 user network. they said not to bother.

    i dont think they fully understand whats at stake when they get there brothers friends son of the guy next door to fix this issue. i have sql2k running, tape backups, raid drives, quickbooks and striped drives, firewalls and routing going.

    its not going to be a pritty site.
    0
     
    LVL 3

    Accepted Solution

    by:
    looks like you do not have local login right in your  policy.
    Check this article:
    http://www.jsiinc.com/subg/tip3300/rh3361.htm
    0
     
    LVL 7

    Author Comment

    by:5thcav
    im not sure what happend my guess is someone added the admin to a group that didnt have local login access
    and im going to STICK TO IT

    thanks leew

    thanks for the site farpost
    0

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
    With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
    This video Micro Tutorial is the first in a two-part series that shows how to create and use custom scanning profiles in Nuance's PaperPort 14.5 (http://www.experts-exchange.com/articles/17490/). But the ability to create custom scanning profiles al…

    913 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now