Link to home
Start Free TrialLog in
Avatar of ALASKASTREETMASTER
ALASKASTREETMASTERFlag for United States of America

asked on

"The local policy of this system does not allow you to logon interactively"

After logging off of my server, when I try to logon again, I get the following message "The local policy of this system does not allow you to logon interactively".  I am running AD.  I cannot logon under any accounts, even the administrator.  What can I do?  My website and pop3 are still working correctly, I just can't log onto the server..
Also, I don't have terminal services set up, so I can't try that either.  Please help!
ASKER CERTIFIED SOLUTION
Avatar of bilbus
bilbus

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Quoting a suggestion from SystmProg from another post here.....but it might work in your case.

"
1. Goto another computer.
2. Goto Start > Run > type "mmc.exe" (without quotes)
3. Goto File Menu > Add Remove Snap-in > select Local Security Policy > select on Another computer.
4. Edit the policy for remote computer and change the logon rights: -

User Rights Assignment
     Log on locally

Add Administrator account here.

Now try to log on locally using Administrator account.
"

You may also want to read:

"Users Unable to Log On Locally to Terminal Services Computer"
http://support.microsoft.com/kb/q258067/
Avatar of ALASKASTREETMASTER

ASKER

I still cannot log onto the Server.  Is there a way to determine if the Server is even recognizing my remote computer?  I have installed the Admin tool kit onto my XP pro - remote computer.  When I try to access the AD users and computers from programs>admin tools, a pop up comes up with "Naming information cannot be located for the following reason..."The server is not operational", however, my website is still hosted and the mail server still works.  Have any Ideas?
Avatar of kierilf
kierilf

Are you trying to access the server through a remote desktop client such as Dameware or Tivoli, or the true RDP that comes with Windows?
If you are trying to access it with a 3rd party client, then it is possible the server thinks you are trying to logon at the console, and we would look at local logon settings and your user permissions (perhaps add your account to the local administrators group on the server).
If you are trying to logon through RDP that comes with Windows, then I'd check to see if your user account really is part of the administrators or domain administrators group, and check if you have licensing working (it is possible that your computer has an expired terminal services client access license (CAL), which would need to be removed from the registry.)

What exact server do you have?
I have Windows Server 2003 Enterprise.  I am trying to access the server from a computer on the network because the server has locked me out.  "The local policy of this system does not allow you to logon interactively" is the message I get when trying to log onto the server itself, so I have been trying to set up a way to log onto the server from another computer on the same network to change the user rights so there is no coflict.  Microsoft says that is you log onto the server with another computer that is XP=Professional based, you should be able to log directly onto the server and make the changes to the active directory as needed.  So basically all I need to do is be able to make changes to the directory on the server.  How do I log on to the server from another computer?
On your Windows XP Pro based PC:
Start > All Programs > Accessories > Communications > Remote Desktop Connection.
Type in the IP address of your server.
Once you hit connect, you should at least get a picture of the server's login screen.   If you do not get a picture, troubleshoot network connectivity.  Domain membership and permissions do not matter at this stage.
If you get a picture, attempt to log on.   Do you still get an error?   If so, try using the domain\administrator logon, if that does not work, try local administrator (change log on to = computername).
Remote connections might not be enabled or the computer might be too busy to accept new connections.  I believe that the server is not set up as a terminal server.  Is there a way around this?  When I click on remote desptop connections, it asks me to type in the name of the computer.  I click browse, and the computer says there are no Terminal Servers available.  Any ideas?
The terminal services service may not be running.  Or, if it was setup as an application server, perhaps the temporary license expired.
Does that mean I have no way to physically log onto the server at all?  I'm sure there must be a way to log onto the server from another computer or change a registry entry or something.  

Any suggestions at all would be appreciated.  I would hate to have to start completely over!!
There are ways, but we dare not speak their name...https://www.experts-exchange.com/help.jsp#hi100.

Were you unable to used my original suggestion?  That's really the only way I know of to get around this.

look for my comment about installing vnc remotely

using psexec and the admin share

https://www.experts-exchange.com/questions/20721765/Remote-VNC-Installation-Welchia-worm-removal.html?query=vnc+install+remote&clearTAFilter=true

 use this script alot! feel free to remove the Remarks (REM) They are just there to tell you what each section does
............................................
set ComputerName=Put IP/dns here
set username=Put username here

NET USE \\%computerName%\IPC$ /user:%username%


REM Copy your local VNC files to the remote PC.
xcopy "C:\temp\VNCInstall\vnc" "\\%computerName%\C$\Program Files\ultraVNC\*.*" /r/i/c/h/k/e

REM Export your current VNC registry to the below path. you can use regedit to export this section[HKEY_LOCAL_MACHINE\SOFTWARE\ORL]

xcopy "C:\temp\VNCInstall\Reg" "\\%computerName%\C$\" /r/i/c/h/k/e

REM Use Regedit to export the local VNC registry settings to the remote PC. Note: If you prefer you can export the file locally and then copy it.

REM import the above registry file on the remote PC.

psexec \\%computerName% -s -i -d regedit /s C:\import.reg

REM PsExec to install the remote winvnc service.

psexec \\%computerName% -s -i -d "C:\Program Files\ultravnc\winvnc.exe" -install

REM Use PsExec to start the remote "VNC Server" service.

psexec \\%computerName% -s -i -d net start "VNC Server"
oh ya you need to know the admin password, and have access to the network to do this (uses RPC). So if its on a lan, No firewall, Or you can vpn into the network then good to go