We help IT Professionals succeed at work.

SBS 2003 SP2 - Corrupt Admininstrator account

rkw2803
rkw2803 asked
on
668 Views
Last Modified: 2012-05-06
I'm unable to log in to the server while sitting there.  The error message is that this account is not allowed to log in.  I can log in remotely via TS using the same credentials but can not create a new user, cannot view event logs, and when I try and drill down in Exchange Server in MMC, MMC crashes with the message asking if I want to report the error to Microsoft.  The error signature refers to AppName: mmc.exe, AppVer: 5.2.3790.3959 and ModName is ntdll.dll  When I try to access an event log, I get an error stating:  "Unable to complete the operation on "Application". Access is denied."

Along with this issue is the server looses internet connectivity nightly - when this happens, I can ping the public IP of the router, but cannot ping the public IP for the server nic.  When there is connectivity I can ping both IP addresses.  I'm going to look at the NIC and test it, but with access problems under the Administrator account it's a bit dicey.  There is another account that I can log in with that does have admin privileges.

If I rename the admin profile (C;\documents and Settings\administrator) will that resolve the permission issues?  Or, is there something more going on and other things to look at?

There are other issues with this server and I'm on the verge of just wiping the drive and starting fresh.

Thanks

Richard
Comment
Watch Question

It looks like your "administrator" account might not actually be a member of the Domain Admins security group.  This would explain why you can't log in locally, and why you cannot open the event viewers.

Log in with your other account that does have administrative access, and check the group membership of your "administrator" account.  Compare the membership settings to your working account if needed.

Author

Commented:
Thanks for your comment.

Logging in with other admin account shows Administrator to be a member of Domain Admins.  Membership settings are the same.

.
Expert of the Quarter 2009
Expert of the Year 2009
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION
You can try renaming the administrator profile and letting it re-create on the next login.  This may help if the issue is a corrupt profile.  Just make sure you only re-name (and not delete) the profile if there are documents you need on the administrator profile.

If you are still having problems, check the Local Security Policy and/or the Domain Security Policy on the server.  These are located in the Administrative Tools folder.

Look for permissions for "Allow Logon Locally"

Author

Commented:
Thanks for the reply - this was very helpful.

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.