Guest Lumpjaw Posted February 21, 2008 Posted February 21, 2008 RE: Administrator Account (Local Policy) Greetings all, I have an interesting problem, I cannot use the administrator (user) account to log on to my SBS 2003 R2 locally. I get an error that says local policy does not allow logon. This problem is with the user-administrator, not the group because other administrator accounts can logon on just fine. Can anyone shed a little light on how I can fix this so I can get back to using the 'administrator' account? Thanks for the help. -Lumpjaw
Guest Les Connor [SBS MVP] Posted February 21, 2008 Posted February 21, 2008 Re: Administrator Account (Local Policy) Re: Administrator Account (Local Policy) Most commonly, the user account has membership in a security group it shouldn't belong to. -- Les Connor [sBS MVP] ________________________ Get the SBS BPA here: http://support.microsoft.com/kb/940439/en-us "Lumpjaw" <onemail@email.com> wrote in message news:eEGs5tCdIHA.1184@TK2MSFTNGP04.phx.gbl... > Greetings all, > > I have an interesting problem, I cannot use the administrator (user) > account to log on to my SBS 2003 R2 locally. I get an error that says > local policy does not allow logon. This problem is with the > user-administrator, not the group because other administrator accounts can > logon on just fine. Can anyone shed a little light on how I can fix this > so I can get back to using the 'administrator' account? Thanks for the > help. > > > -Lumpjaw >
Guest Holz Posted February 21, 2008 Posted February 21, 2008 Re: Administrator Account (Local Policy) Re: Administrator Account (Local Policy) On Wed, 20 Feb 2008 20:45:45 -0500 "Lumpjaw" <onemail@email.com> wrote: > Greetings all, > > I have an interesting problem, I cannot use the administrator (user) > account to log on to my SBS 2003 R2 locally. I get an error that > says local policy does not allow logon. This problem is with the > user-administrator, not the group because other administrator > accounts can logon on just fine. Can anyone shed a little light on > how I can fix this so I can get back to using the 'administrator' > account? Thanks for the help. > > > -Lumpjaw > > What / who is the user administrator account you are referring to? The original installation account? -- live, or leave & let live. :-)
Guest SuperGumby [SBS MVP] Posted February 21, 2008 Posted February 21, 2008 Re: Administrator Account (Local Policy) Re: Administrator Account (Local Policy) I believe he is talking about 'Administrator', also known as the 500 account. The problem is probably due to putting the Administrator account into a group (I'm not sure which, I think RWW Users is the common mistake). Log on as admin remotely (RDP from local PC should work), see if admin is a member of RWW Users, if so remove him from this group, he gets access by 'Domain Administrator' membership. "Holz" <holz@my-laptop.nowhere> wrote in message news:20080220181751.2e62c626@laptop... > On Wed, 20 Feb 2008 20:45:45 -0500 > "Lumpjaw" <onemail@email.com> wrote: > >> Greetings all, >> >> I have an interesting problem, I cannot use the administrator (user) >> account to log on to my SBS 2003 R2 locally. I get an error that >> says local policy does not allow logon. This problem is with the >> user-administrator, not the group because other administrator >> accounts can logon on just fine. Can anyone shed a little light on >> how I can fix this so I can get back to using the 'administrator' >> account? Thanks for the help. >> >> >> -Lumpjaw >> >> > What / who is the user administrator account you are referring to? The > original installation account? > > -- > live, or leave & let live. > :-) >
Guest Lumpjaw Posted February 21, 2008 Posted February 21, 2008 Re: Administrator Account (Local Policy) Re: Administrator Account (Local Policy) Yes, the builtin account. We had a 'computer' company trying to access remotely for maintenance and i know that this administrator account was put into other 'groups' to gain access, needless to say there attempts did not work, it only locked up the administrator acount. Do you know what group might be the culprit? -l "Holz" <holz@my-laptop.nowhere> wrote in message news:20080220181751.2e62c626@laptop... > On Wed, 20 Feb 2008 20:45:45 -0500 > "Lumpjaw" <onemail@email.com> wrote: > >> Greetings all, >> >> I have an interesting problem, I cannot use the administrator (user) >> account to log on to my SBS 2003 R2 locally. I get an error that >> says local policy does not allow logon. This problem is with the >> user-administrator, not the group because other administrator >> accounts can logon on just fine. Can anyone shed a little light on >> how I can fix this so I can get back to using the 'administrator' >> account? Thanks for the help. >> >> >> -Lumpjaw >> >> > What / who is the user administrator account you are referring to? The > original installation account? > > -- > live, or leave & let live. > :-) >
Guest Lumpjaw Posted February 21, 2008 Posted February 21, 2008 Re: Administrator Account (Local Policy) Re: Administrator Account (Local Policy) Well that is sort of another problem, the admin account has been turned off from RDP, I don't know where the setting is, can you shed any light? Thanks. -lumpjaw "SuperGumby [sBS MVP]" <not@your.nellie> wrote in message news:%23EYNMHDdIHA.4312@TK2MSFTNGP03.phx.gbl... >I believe he is talking about 'Administrator', also known as the 500 >account. > > The problem is probably due to putting the Administrator account into a > group (I'm not sure which, I think RWW Users is the common mistake). > > Log on as admin remotely (RDP from local PC should work), see if admin is > a member of RWW Users, if so remove him from this group, he gets access by > 'Domain Administrator' membership. > > "Holz" <holz@my-laptop.nowhere> wrote in message > news:20080220181751.2e62c626@laptop... >> On Wed, 20 Feb 2008 20:45:45 -0500 >> "Lumpjaw" <onemail@email.com> wrote: >> >>> Greetings all, >>> >>> I have an interesting problem, I cannot use the administrator (user) >>> account to log on to my SBS 2003 R2 locally. I get an error that >>> says local policy does not allow logon. This problem is with the >>> user-administrator, not the group because other administrator >>> accounts can logon on just fine. Can anyone shed a little light on >>> how I can fix this so I can get back to using the 'administrator' >>> account? Thanks for the help. >>> >>> >>> -Lumpjaw >>> >>> >> What / who is the user administrator account you are referring to? The >> original installation account? >> >> -- >> live, or leave & let live. >> :-) >> > >
Guest Holz Posted February 21, 2008 Posted February 21, 2008 Re: Administrator Account (Local Policy) Re: Administrator Account (Local Policy) On Thu, 21 Feb 2008 13:30:57 +1100 "SuperGumby [sBS MVP]" <not@your.nellie> wrote: > I believe he is talking about 'Administrator', also known as the 500 > account. You are probably right, but they way the post is worded is confusing. "Other Administrator accounts..", so I am trying to decrypt :-). -- live, or leave & let live. :-)
Guest Holz Posted February 21, 2008 Posted February 21, 2008 Re: Administrator Account (Local Policy) Re: Administrator Account (Local Policy) On Wed, 20 Feb 2008 21:39:49 -0500 "Lumpjaw" <onemail@email.com> wrote: > the admin account has been turned off > from RDP, Common! do you mean prevented from using RDP, or was turned off while using and RDP session? We are trying to help you! -- live, or leave & let live. :-)
Guest Patrick Posted February 21, 2008 Posted February 21, 2008 Re: Administrator Account (Local Policy) Re: Administrator Account (Local Policy) Hey I understand, It was basically turned off to keep a guy from doing things he should not be doing on the server from the comfort of his chair (it's a long story). Security reasons, it was through a policy setting, just don't know which. Thanks for the help. "Holz" <holz@my-laptop.nowhere> wrote in message news:20080220185158.2cdbd2ec@laptop... > On Wed, 20 Feb 2008 21:39:49 -0500 > "Lumpjaw" <onemail@email.com> wrote: > >> the admin account has been turned off >> from RDP, > Common! do you mean prevented from using RDP, or was turned off while > using and RDP session? We are trying to help you! > > -- > live, or leave & let live. > :-) >
Guest Patrick Posted February 21, 2008 Posted February 21, 2008 Re: Administrator Account (Local Policy) Re: Administrator Account (Local Policy) It's late, The account that is having the problem is the 'administrator' account, not the group (or I should say users that are a part of the group). My user account has administrative level privilages (administrator group member), and works just fine. It's just the user 'administrator' (builtin account) that is *&%ed up, sorry I am not so clear, been trying to fix the problem for quite awhile. Thanks for the help. -lumpjaw "Holz" <holz@my-laptop.nowhere> wrote in message news:20080220184257.609ea220@laptop... > On Thu, 21 Feb 2008 13:30:57 +1100 > "SuperGumby [sBS MVP]" <not@your.nellie> wrote: > >> I believe he is talking about 'Administrator', also known as the 500 >> account. > You are probably right, but they way the post is worded is confusing. > "Other Administrator accounts..", so I am trying to decrypt :-). > > -- > live, or leave & let live. > :-) >
Guest Holz Posted February 21, 2008 Posted February 21, 2008 Re: Administrator Account (Local Policy) Re: Administrator Account (Local Policy) On Wed, 20 Feb 2008 21:57:59 -0500 "Patrick" <no@email.com> wrote: > just don't know which. > Thanks for the help. Thank you Patrick. Open your server management, go to group policies. I am not in front of the server now. I believe it is under Computer policies, Windows settings, security, local policies. In the right pane you should see the relevant keys, like allow to log on locally, allow login via terminal, etc. Sorry for getting frustrated, it was a very long day. -- live, or leave & let live. :-)
Guest Patrick Posted February 21, 2008 Posted February 21, 2008 Re: Administrator Account (Local Policy) Re: Administrator Account (Local Policy) I hear ya, thanks for the tip I will give it a try in the morning. -lumpjaw "Holz" <holz@my-laptop.nowhere> wrote in message news:20080220190741.604866f1@laptop... > On Wed, 20 Feb 2008 21:57:59 -0500 > "Patrick" <no@email.com> wrote: > >> just don't know which. >> Thanks for the help. > Thank you Patrick. > Open your server management, go to group policies. I am not in front of > the server now. > I believe it is under Computer policies, Windows settings, security, > local policies. > In the right pane you should see the relevant keys, like allow to log > on locally, allow login via terminal, etc. > Sorry for getting frustrated, it was a very long day. > > -- > live, or leave & let live. > :-) >
Guest Holz Posted February 21, 2008 Posted February 21, 2008 Re: Administrator Account (Local Policy) Re: Administrator Account (Local Policy) On Wed, 20 Feb 2008 22:14:49 -0500 "Patrick" <no@email.com> wrote: > I hear ya, thanks for the tip I will give it a try in the morning. > > -lumpjaw Actually make sure you are looking at Domain Controller gpo. if you need more help, e-mail me s e r v i c e -at- conejonetwork dot com I will send you some snapshots. -- live, or leave & let live. :-)
Guest Patrick Posted February 24, 2008 Posted February 24, 2008 Re: Administrator Account (Local Policy) Re: Administrator Account (Local Policy) Thanks Holz, This was the problem and everything works great now. Best Regards, Lumpjaw " <holz@my-laptop.nowhere> wrote in message news:20080220192215.5be6ec71@laptop... > On Wed, 20 Feb 2008 22:14:49 -0500 > "Patrick" <no@email.com> wrote: > >> I hear ya, thanks for the tip I will give it a try in the morning. >> >> -lumpjaw > Actually make sure you are looking at Domain Controller gpo. > if you need more help, e-mail me > s e r v i c e -at- conejonetwork dot com > I will send you some snapshots. > > -- > live, or leave & let live. > :-) >
Recommended Posts