Can't log on interactively

[alanbloom]

I've work at a training centre and the IT bloke that was here (who thought quite highly of himself) has set up Windows in a akward way. He's gone AWOL and we are just trying to pick up the pieces (many pieces!)

He's briefly documented his setup and said that he has created a restricted account called 'Administrator' and renamed the actual Administrator account to something else (to confuse 'hackers'). We've got the log on details but when I try, it says 'Can't log on interactively'. What
does this mean?

We have problems trying to change the GPO on the machine but it is all locked out, even in accounts that do seem to have all the correct priviledges... I needed to see whether this renamed account is going to be the answer...

Thanks

 

[itsp1965]

Alan, first thing.. are there any administrative accounts available for you to use on this host? It is also possible the GPO cannot be modified since the administrative accounts on this server do not have the appropriate rights to group policy.
As for your problem not being able to logon interactively.. this is probably due to a policy setting that prohibits specific users from logging on.
Can you logon as the domain administrator and open the GPO so you can see what has been setup.
Hope this helps.

 

[alanbloom]

Hi there

Thanks for the reply - it was helpful. There is another administrator account which is active and now has Domain Admin priviledges (I didn't realise only Domain Admins could see the GPO). So that is now sorted

Where would restrictions that prohibit certain users logging on be set?

Thanks again!

 

[itsp1965]

Under Security Settings (don't remember if it is under Computer or User) there is a setting that indicates who can logon interactively