local policy denies local admin logon

[Antony Dwyer]

hi all, i have a 2000pro machine and upon trying to log on
as the local admin which i always logged on with i get the
error 'local policy on this system does not permit
interactive logon' - i can log on as the admin of the
domain and checked the security policy for the machine,
adding the local admin to the 'logon locally' policy
however this makes no difference at all....i read some
info abt the security database perhaps being corrupt and
so tried reinstating a working .sdb file into my system
however this too makes no difference....the only thing i
have done recently is install the .net framework...

any ideas appreciated...

 

[Steven L Umbach]

Did the administrator account possibly get it's name changed and a decoy
renamed administrator? It seems very odd that the domain administrator can log on
but not the local administrator. Check the deny logon locally setting also. It might
be worthwhile to run the Security Configuration and Analysis tool mmc snapin against
the setup security .inf template to see what it finds.--- Steve