I
Intotao
Hi Everyone,
Something has gone horribly wrong in the Active Directory
Group Policies that is now causing the machine to Deny
Interactive logon for everyone except standard "Users" If
I add a new account, only belonging to the users group
they can log in, otherwise they are given the "cannot
logon interactively" message, the second I add them to the
administrators group. I've spect several days looking
around to see if I could locate the offending policy but
cannot. I've tried not configuring Denyinteractivelogon,
then configuring it with only guests, as well as
grantinteractivelogon to be not configured and then
granted it to everyone (Vice versa) in the local domain
and nothing seems to work. Currently I log into the mmc
using 'runas' and can access the snap-in from there as the
administrator. I'm completely out of ideas and frustrated.
Seeing as how there are only 5 user accounts for this
client, does anyone know how to set the group policy/local
domain policy to default? Is there a tool in the resource
kit or something? I don't care at this point if I wipe out
their accounts, I can rebuild, but I just don't want to
have to rebuild the ENTIRE SERVER and EXCHANGE server as
well....Please help me!!!!
....Am I sounding pathetic enough?
Something has gone horribly wrong in the Active Directory
Group Policies that is now causing the machine to Deny
Interactive logon for everyone except standard "Users" If
I add a new account, only belonging to the users group
they can log in, otherwise they are given the "cannot
logon interactively" message, the second I add them to the
administrators group. I've spect several days looking
around to see if I could locate the offending policy but
cannot. I've tried not configuring Denyinteractivelogon,
then configuring it with only guests, as well as
grantinteractivelogon to be not configured and then
granted it to everyone (Vice versa) in the local domain
and nothing seems to work. Currently I log into the mmc
using 'runas' and can access the snap-in from there as the
administrator. I'm completely out of ideas and frustrated.
Seeing as how there are only 5 user accounts for this
client, does anyone know how to set the group policy/local
domain policy to default? Is there a tool in the resource
kit or something? I don't care at this point if I wipe out
their accounts, I can rebuild, but I just don't want to
have to rebuild the ENTIRE SERVER and EXCHANGE server as
well....Please help me!!!!
....Am I sounding pathetic enough?