Unable to logon interactively

[Varsada]

Hi,

New here but need some help, hope someone can as this is doing my head in ever so slightly.

I have a 2003 SBS Domain, yesterday everything was fine and dandy, today however is a different matter.

The problem is this, when I attempt to logon locally to the DC I get the error "A local policy on this system does not permit you to logon interactively".
Now while this message in itself is not a big deal, it just so happens that it is a message that is being displayed from the local console.
I can not logon remotely to it either, yesterday I could do both.

The only thing that has changed since yesterday and today is that I had to uninstall Sharepoint Server 2007 and v3 as they were not working properly.

To add to the confusing circumstances surrounding this, this morning I logged on locally to the DC to check the backup, I managed to login fine, I then logged out.
After which I needed to log in again because I could not log in remotely and I intended to find out what the problem was.
This was when I got this message, I therefore logged into the server locally as my backup domain admin account and got it fine, I checked the policies etc, nothing wrong, I logged out then back in again, I got the message again using my backup Domain Admin account, this now means that both my Domain Admin accounts are unable to log onto the server either remotely or locally, which presents a little bit of an issue really!

I have found a way set the policies back to when the server was first installed by using the Security analyser and configuration snap in for the MMC, but I'm not ready to reset everything just yet.
I have tried ntrights, but it looks as if you can no longer use the SelInteractiveLogon parameter any more, I did try to give an account Backup Operators rights just so I could log in but that never worked, I just got an error.

I have just installed this server only at the begining of this month and the backup tapes have not been working that well so I'm not really sure if I can rely on those.

The worst thing that could happen is that I have to reinstall the server and set it up again from scratch, I'm hoping not to do this however and hoping that one of you nice people out there may have come across this and found a way out of it rather than performing a rebuild.

Any and all help is most gratefully received and welcome.

With thanks in advance

Jeff

 

[TechSoEasyMVP]

Well, first of all, you can't install SharePoint Server 2007 on an SBS. You CAN install WSS 3.0, but you still have to keep 2.0 and run it side-by-side. There's a paper on how to do this here:

http://www.microsoft.com/downloads/...81-efff-4f5b-a28a-8265f1e99f5b&displaylang=en

The fact that you are mentioning things like "ntrights" or "SelInteractiveLogon" makes me think that you have been managing this server in a way that is not in line with the way SBS is designed. If you have not used the wizards for ALL configurations that can be done via the wizards, you will end up being very frustrated with your server. Because there are so many things combined on an SBS which would not be in the same box on a stand-alone server network, it's imperative that the wizards be used to ensure the proper synchronization of all settings.

See

http://sbsurl.com/itpro

for more details on this.

So... I'm guessing that you have put the administrator user accounts into either the Domain Power Users Group or the Remote Operators Group. Both of these restrict local logon. To remedy the problem you must install the Windows Server 2003 SP1 support tools on a member workstation so that you can access Active Directory and remove the user accounts from the group (download from here:

http://sbsurl.com/suptools).

Jeffrey B. Kane
TechSoEasy

http://www.techsoeasy.com