How do I set up a console log in for an administrator on SBS 2008?

My administrator account is locked out of logging in at the server terminal because Deny Local Log On includes the SBS Remote Users group. I am unable to remove the SBS Remote Users from this group policy. Is there a way I can either:

a) enable SBS Remote Users to log on locally?
b) create a local user with admin rights (but not SBS Remote User rights)?
c) enable my administrator account to log on locally despite the implicit deny?
Technical_EddAsked:
Who is Participating?
 
Cris HannaCommented:
Can you access the Domain Security Policy remotely?
0
 
connectexCommented:
This doesn't seem like the stardard SBS 2008 installation. What changes have you made and why?

-Matt-
0
 
Cris HannaCommented:
So you can logon to the SBS via RDP or RWW??
0
Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

 
Technical_EddAuthor Commented:
This was set up before I took over the client. My Administrator account can log in via RDP. I need to be able to log in at the console as I've had occasional UPS issues on site.
0
 
Cris HannaCommented:
If you look at your account properties in AD, what groups are you a member of?
0
 
Technical_EddAuthor Commented:
Administrators
Domain Admins
Domain Users
Enterprise Admins
Exchange Organization Admins
Group Policy Creator Owners
Mail Operators
Mobile Users
Schema Admins
<3x SQL admins>
0
 
Cris HannaCommented:
Can you create a new user for yourself using the SBS Console, assign it the network admin role.
Can you logon then?
0
 
Technical_EddAuthor Commented:
I get the error message:

You cannot log on because the log on method you are using is not allowed on this computer. Please see your network administrator for more information.
0
 
Cris HannaCommented:
Was this after creating the new user remotely?
0
 
Technical_EddAuthor Commented:
Yes.
0
 
Technical_EddAuthor Commented:
Figured it out. I was locked out of the machine's local policies, but when I went in under the domain gpmc.msc to change the domain local logon permissions, then I could remove my user form the  deny and add to the allow.
0
 
Technical_EddAuthor Commented:
I found the answer by researching it on a different site.
0
 
Cris HannaCommented:
I'm curious as to why you listed mine as the accepted solution and gave zero points?  If you didn't think it of any help, you should not have marked it as the accepted solution
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.