Windows Forum

Ask something
Discussion Locked

Administrator can't log on interactively

0 helpful
9 replies

by josep_m

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I'm a Windows 2000 Server administrator (the only one!). I made a mistake (I don't know what, perhaps install SP2 or made criticall upgrades from MS) and now when I try to log on the Server, It says: "The local policy of this system does not allow you to log on interactively". No one can log on locally!
I have the login/password for Administrate the Server, and I can connect to It between a Client, but not directly on the Server.
From a client I can access the hard disc on the Server (a shared folder to C:\ and I have the rights)
The Server It's a domain controler. It has 9 clients with Windows 2000 Professional.
I don't have Emergency Boot Disk (ERD)

What can I do to access to domain policies and change It for allow local access? I'm a newbe on Windows 2000 Server

Thanks a lot

Josep M.

9 replies

by jmacdonald

It sounds like in your Domain controller local policy or in your Domain Controller Group Policy the log on locally right has been set to Deny or the Administrator account was removed. The only way I can think about getting around this to change it, log on to a Win 2K pro Workstation as the Domain Admins and add the Active directory Users and computers or build an mmc and add Group Policy. Once those snap ins are created you should be able to edit the Domain controller group policy and see if the rights are okay there and change if needed. Deny always wins over allow. Make sure authenticated users are in the Allow users to log on locally along with Enterprise Admins etc. Hope this helps.

by shepster

I will post this answer here too as you have offered more points on this version of your question:

The following Microsoft Knowledge Base articles explain the problem and almost explain the solution:
Article ID: Q276590
Article ID: Q279664
I had to go purchase the Windows 2000 Server Resource Kit to get the ntrights.exe file. Couldn't find it anywhere on Microsoft's site or the net. The articles give the wrong syntax to fix the problem though. The proper syntax is:

ntrights ?m \\computername +u everyone +r SeInteractiveLogonRight

You may have to buy the resource kit (which I have found to be worth the money), but this should fix your problem.

by adrian.wilkins

FOR FREE.

Install the admin support tools in a win2k pro pc and access your ad that way. 2 DC's and a win2k pro pc with admin tools is the safest way to go.

by josep_m

I can't find admin tools in WIN2000 PRO. It's the same that Windows 2000 Support Tools? Where can I find/download Windows 2000 admin tools?

This discussion is closed to new replies.