Link to home
Start Free TrialLog in
Avatar of eatham111
eatham111

asked on

Remote Administration interactive logon privileges disabled

Windows 2003, fresh install, nothing running, I can do whatever I want with it.
Terminal server role not added
Application server role added (intended to be be an intranet server once I get this fixed)

I can log on to the system using remote desktop as the local admin (no other local users set up, so I didn't try that), but I cannot log on as a domain admin.  When I try, I get the message "Your interactive logon privilege has been disabled.  Please contact your system administrator."  

I have explicitly added the domain account to the Remote Desktop Users, and it is also a member of the local administrative group.   I have also allowed that account the "log on locally" right.

Any ideas?  Pulling my hair out here.
Avatar of joedoe58
joedoe58

Is you server joined to a domain?
Avatar of eatham111

ASKER

Yes - it is joined to a Windows 2000 domain.
You also must have the allow logon to terminal server property on the user's AD account, on the terminal server tab
The role Terminal Server is not added - this is not a terminal server.  This is for remote administration.  On the remote tab, the user is added implicitly (because it is a domain admin, and the domain admins are local admins).
ASKER CERTIFIED SOLUTION
Avatar of harleyjd
harleyjd

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial