kb943485 - Dreaded admin not able to log on locally after patch

Discussion in 'Windows Small Business Server' started by Tim_S, Feb 3, 2008.

  1. Tim_S

    Tim_S Guest

    Well, today i applied the KB943485 patch to my SBS 2003 and Standard 2003
    server in my domain....

    I rebooted and bang... using the administrator (builtin) account would
    refuse to log in. The error was....

    Local Security Policy won't permit interactive login

    This account would log - in fine before the patch's were applied.

    I applied KB941644 and KB943485 and I believe that the 485 was the one that
    changed security settings.

    I looked in the Domain Controller Security settings and the Administrator
    account is set to allow local login and it is not denied interactive login
    in any of the policy groupings....

    I could log in using a normal user account that is also in the administrator
    group just fine. As that was my only means of getting back in... but the
    server\administrator account was inoperative.

    The only way I could get the Administrator account to be able to log in
    locally was to create/set a Domain Security Policy that explicitly allows
    the administrator to log in locally... If I remove that from the Domain
    security policy, the Domain Controller Security policy where it is also
    allowed is rejecting it....

    go figure... you think the Administrator account should top all other
    accounts... but not in this case...

    Tim_S, Feb 3, 2008
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.