Solved

Unable to Logon Locally using domain Admin account

Posted on 2008-06-17
4
860 Views
Last Modified: 2013-12-05
Hi,
Could someone guide me on this issue. We have a windows 2000 DC and another server running win"K with exchagne server 2K installed on it. When I try to log on to this second server locally using a domain admin account it does not allow me. But when i try to do so using another account which also has domain admin privilliges, it does log me on.
Just wondering what causes this issue?

Please advice.....

Regards,
Naga.
0
Comment
Question by:nvrkakarla
4 Comments
 
LVL 8

Assisted Solution

by:Sinder255248
Sinder255248 earned 100 total points
ID: 21801356
It could be that it's your first account is denied access in the RDP protocol, Administrative Tools -->  Terminal services config -->  Right click RDP -->  Properties --> Permissions Tab.

Or it could be in group policy -->  Comp Config --> Windows settings -->  Security --> Local Policies -->  User rights assignments

Check these policies under the above location:

Allow logon locally
Allow logon through terminal services
Deny logon locally
Deny logon through terminal services
0
 

Author Comment

by:nvrkakarla
ID: 21801436
Hi Sinder,
thanks for your reply.
Just like to add to my question that this first account does allow me to logon using remote desktop, but when i use the same to logon locall on the server, it denies me!

pleae advice...

Regards,
Naga.
0
 
LVL 7

Accepted Solution

by:
ms-pro earned 200 total points
ID: 21802303
To permit users to log on locally to a domain controller
1.
 Open Domain Controller Security Policy.
 
2.
 In the console tree, click User Rights Assignment.
 
3.
 In the details pane, double-click Allow log on locally.
 
4.
 If this security setting has not yet been defined, select the Define these policy settings check box, and click Add User or Group.
 
5.
 In Add user or group, specify the user or group who will be granted permission to log on locally, and then click OK twice.

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_23460418.html
0
 
LVL 31

Assisted Solution

by:Henrik Johansson
Henrik Johansson earned 200 total points
ID: 21808101
As you can log on through RDP to the Exchange server, it's a problem with the right to logon locally on that computer.
The user rights assignment for allow or deny logging on locally has been defined in the local security policy (gpedit.msc) on the Exchange server or in a GPO linked to the OU-structure containing the Exchange server. If listed as deny, it will override the allow permission.
Run rsop.msc to see what policy is defining the user right. Expand Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment
* Allow log on locally
* Deny log on locally
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Mapping Drives using Group policy preferences Are you still using old scripts to map your network drives if so this article will show you how to get away for old scripts and move toward Group Policy Preference for mapping them. First things f…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now