\\servername\share logon failure for domain admins

[Guest]

I tried to open a shared folder with \\servername\sharename and received the
error "\\servername\sharename is not accessible. ....Logon Failure: the user
has not been granted the requested logon type at this computer".

Troubleshoot attempt 1 - Since I only have this problem on this server, I
first checked the local security policy to confirm the user rights
assignement for "access this computer from the network". There is a check
next to ADDOMAIN\Domain Admins under local policy settings but no check under
effective policy settings. I assume the problem is with group policy and go
on to attempt 2.

Troubleshoot attempt 2 - I run gpresult /V on the server I cannot connect
to. Results show that security settings are coming from 2 group policies;
password policy and default domain policy. When I check these 2 group
policies, I find that "user rights assignments" is not set.

Anyone have an idea as to what is denying network logon to the domain admins
group? I can connect when not a member of this group.

 

[Guest]

Just a few inches down is "deny access to this computer from the network" and
that is where I found administrators denied.