Solved

Unable to login to domain controller - RDP

Posted on 2015-02-24
2
115 Views
Last Modified: 2015-03-05
Hey guys, i was adjusting some Gpo settings on the default domain controllers policy. Using this link:
http://www.networknet.nl/apps/wp/archives/1789

Now it locked me out i guess because i didnt specify domain admins. I was able to login using the console, and revert the Gpo change, and ran gpupdate/force.

I still cannot get back in though, it says i dont have rights. How can i get this going?
0
Comment
Question by:Cobra25
2 Comments
 
LVL 6

Accepted Solution

by:
rgorman earned 500 total points
ID: 40629671
So I am assuming you can't log on using RDP but can log on using the console, right?

All you should need to do is add the user account to the built in Remote Desktop Users group in AD and make sure the group has "Allow Log on through Remote Desktop services" rights in the Default Domain Controller policy.  You MAY need to also grant the group "Allow log on locally" rights.  Once you do that and run your gpupdate you should be good to log in through RDP.
0
 
LVL 53

Expert Comment

by:Will Szymkowski
ID: 40629688
If you have locked yourself out by not adding domain admins to the GPO, all you need to do is install RSAT (remote server admin tools) on a client machine and then open Group Policy Management Console (gpms.msc) and add the appropriate security filtering permissions.

That should do it.

Will.
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now