W2K Server -- local settings versus effective settings

Hello,

I have a domain of W2K SP 4 member servers and domain controllers. The
domain policy is set to allow only members of Domain Admins and Domain
Users to logon locally. This is the effective setting, no local
settings are configured.

Today I was recovering a box from image (and at the time, the box
wasn't plugged into the network). After the image loaded, I was unable
to logon locally to the box (with the local administrator account); I
received an error stating that I was not allow to log on locally.

This is where I get confused. The effective settings come from the
domain. But the box wasn't plugged into the domain when it rebooted.
If there are no local policies set and the box didn't get the domain
policies when it booted (because it wasn't talking to the domain), then
how did I prevented from logging on locally with the local
administrator?

Steven
Thu Feb 03 14:38:52 CST 2005

Assuming you were able to logon with a domain account check the Local
Security Policy to see if it was what you expected and also check the deny
logon locally settings. Possibly the image was made from a computer that had
restrictive settings applied to it. --- Steve


"Adam Sandler" <corn29@excite.com> wrote in message
news:1107458101.673656.58920@l41g2000cwc.googlegroups.com...
>
>
> Hello,
>
> I have a domain of W2K SP 4 member servers and domain controllers. The
> domain policy is set to allow only members of Domain Admins and Domain
> Users to logon locally. This is the effective setting, no local
> settings are configured.
>
> Today I was recovering a box from image (and at the time, the box
> wasn't plugged into the network). After the image loaded, I was unable
> to logon locally to the box (with the local administrator account); I
> received an error stating that I was not allow to log on locally.
>
> This is where I get confused. The effective settings come from the
> domain. But the box wasn't plugged into the domain when it rebooted.
> If there are no local policies set and the box didn't get the domain
> policies when it booted (because it wasn't talking to the domain), then
> how did I prevented from logging on locally with the local
> administrator?
>