How do I set up a console log in for an administrator on SBS 2008?

My administrator account is locked out of logging in at the server terminal because Deny Local Log On includes the SBS Remote Users group. I am unable to remove the SBS Remote Users from this group policy. Is there a way I can either:

a) enable SBS Remote Users to log on locally?
b) create a local user with admin rights (but not SBS Remote User rights)?
c) enable my administrator account to log on locally despite the implicit deny?
Technical_EddAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

connectexCommented:
This doesn't seem like the stardard SBS 2008 installation. What changes have you made and why?

-Matt-
0
Cris HannaSr IT Support EngineerCommented:
So you can logon to the SBS via RDP or RWW??
0
Technical_EddAuthor Commented:
This was set up before I took over the client. My Administrator account can log in via RDP. I need to be able to log in at the console as I've had occasional UPS issues on site.
0
Acronis True Image 2019 just released!

Create a reliable backup. Make sure you always have dependable copies of your data so you can restore your entire system or individual files.

Cris HannaSr IT Support EngineerCommented:
If you look at your account properties in AD, what groups are you a member of?
0
Technical_EddAuthor Commented:
Administrators
Domain Admins
Domain Users
Enterprise Admins
Exchange Organization Admins
Group Policy Creator Owners
Mail Operators
Mobile Users
Schema Admins
<3x SQL admins>
0
Cris HannaSr IT Support EngineerCommented:
Can you create a new user for yourself using the SBS Console, assign it the network admin role.
Can you logon then?
0
Technical_EddAuthor Commented:
I get the error message:

You cannot log on because the log on method you are using is not allowed on this computer. Please see your network administrator for more information.
0
Cris HannaSr IT Support EngineerCommented:
Was this after creating the new user remotely?
0
Technical_EddAuthor Commented:
Yes.
0
Cris HannaSr IT Support EngineerCommented:
Can you access the Domain Security Policy remotely?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Technical_EddAuthor Commented:
Figured it out. I was locked out of the machine's local policies, but when I went in under the domain gpmc.msc to change the domain local logon permissions, then I could remove my user form the  deny and add to the allow.
0
Technical_EddAuthor Commented:
I found the answer by researching it on a different site.
0
Cris HannaSr IT Support EngineerCommented:
I'm curious as to why you listed mine as the accepted solution and gave zero points?  If you didn't think it of any help, you should not have marked it as the accepted solution
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.