We help IT Professionals succeed at work.

Server 2008 Administrator login method not allowed

Here is the issue .  
Server running 2008 enterprise. This is my domain controller box.

I can login to the server using rdp - using the administrator account mydomain\administrator

I can not login on the server desktop using the same said above account . it says log on method not allowed.

Any suggestions?
Comment
Watch Question

Justin OwensITIL Problem Manager

Commented:
Run a GPRESULT /R and see if any GPOs other than Default Domain Controller are applied to it.  Make sure any GPOs applied to it do not have any restrictions on console login method.

Author

Commented:
Did this already ... no rogue policies applied and i verified  there are no restrictions
Justin OwensITIL Problem Manager

Commented:
Have you checked that user in ADUC to see if it has been restricted in any way?
It might be better if you tell us everything you have done so that we don't send you on wild goose chases...

Author

Commented:
well all i've really done is look at my group policies to see if i have any restrictions for log on the administrator account. There are none....

A bit preplexed as to why it would allow me to login using RDP to the server but not on the physical desktop itself.

error below

"You cannot log on because the logon method you are using is not allowed on this computer. Please see you network administrator for more details.

Justin OwensITIL Problem Manager

Commented:
Do you get that error on any other server in your organization?
Top Expert 2012

Commented:
Go into the Local Policy make sure that the user is allowed Logon Locally within this policy.

Author

Commented:
just this one server... all others work
Top Expert 2012
Commented:
Very Weird since the error points to the user not have Logon Locally access.

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_23374404.html
Top Expert 2012

Commented:

Author

Commented:
did all this allready http://www.chicagotech.net/troubleshooting/cannotlogon.htm

i know it is preedy wierd ....
Justin OwensITIL Problem Manager

Commented:
Can you create another account, grant it domain admin rights and log on locally, or are all local logons restricted?
Top Expert 2012

Commented:
Also, run dcdiag on the system to check for any errors.

Author

Commented:
good