?
Solved

Administrator account has a policy denying local and remote logon to SBS server, no other admin accounts

Posted on 2008-01-24
7
Medium Priority
?
230 Views
Last Modified: 2010-04-21
Somehow the Administrator account has a policy that is denying logon remotely and through terminal services.  Basically there is no access to the server.  Any ideas on how I can resolve this is there a tool that can be used to fix this, (ie. create new account, with domain admin priveledges)
0
Comment
Question by:ryanva
  • 2
  • 2
  • 2
  • +1
7 Comments
 
LVL 10

Expert Comment

by:dis1931
ID: 20736358
Hello ryanva,

I assume you have physical access just login locally and fix the issue!

Regards,

dis1931
0
 
LVL 10

Expert Comment

by:dis1931
ID: 20736365
ryanva,

Or is your question that you can login locally and don't know what the issue is?  Is this a domain controller?

dis1931
0
 
LVL 29

Expert Comment

by:Michael Worsham
ID: 20736462
Did someone login to the SBS server and through the Server Management page use the 'Manage user' and modify Administrator to not have remote access capabilities?
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 

Author Comment

by:ryanva
ID: 20737020
As stated above it is a SBS 2003 server hence it is also a domain controller.  I have a feeling that someone did not know what they were doing and denied local and terminal services logins to a group that the administrator is a member of.
0
 
LVL 27

Expert Comment

by:DrDave242
ID: 20737166
If you can't log onto the server locally or via RDP, you should still be able to install the Group Policy Management Console on another domain mamber (a client machine will work just fine if you have no other servers) and edit the offending policy from there.
0
 
LVL 27

Accepted Solution

by:
DrDave242 earned 2000 total points
ID: 20737183
0
 

Author Closing Comment

by:ryanva
ID: 31424710
Thanks I had not even thought about that.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
The Exchange database may sometimes fail to mount owing to various technical reasons. A dismounted EDB file can be the source of many Exchange errors including mailbox inaccessibility for users. Resolving the root cause of mounting problems becomes …
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Suggested Courses
Course of the Month4 days, 3 hours left to enroll

599 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question