Interactive Login Problem

[Dean Penderghast]

OK, I have a very strange problem here that has me stumped.

When you go to the desktop of the server and log in as Administrator (or
anyone with full admin rights), you get a message "Your interactive logon
privilege has been disabled. Please contact your system administrator." and
returns back to the login screen. However, if I log into the server using a
Terminal Server session, it lets me log right in without any problems.

I checked both the Domain Policy and the local policy for "Log in Locally"
and both Administrator and Administrators are listed.

I searched technet and read a bunch of articles about the opposite
happening, but can't find any article that talks about this situation. Has
anyone seen this before, and how can it be fixed?

Thanks!

Dean Penderghast

 

[Steve]

Have your tried running NTRights.exe from the reskit.

NTRIGHTS -u Administrators +r SeInteractiveLogonRight

the deny flag may also be set and causing a conflict

NTRights -u Administrators -r DenySeInteractiveLogonRight

link to MS site with the info for NTrights.

http://support.microsoft.com/default.aspx?scid=kb;EN-US;279664

rgds
Steve

 

[Dean Penderghast]

Thanks Steve, I'll look into that.

By the way, I keep reading about this resource kit. Where can I get it?

Dean Penderghast

 

[Steve]

Most of the tools are available on the ms site for download, I got mine with
TechNet for 2k server. and with the 2k pro resource kit book,

link here
http://www.microsoft.com/windows2000/techinfo/reskit/default.asp

the 2k3 kit is included with the Win2k3 deployment kit

http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/deployguide/en-us/default.asp

some of the reskit tools have been included with the support tools for 2k3
hth
rgds
Steve