"Run as" Domain account error

MargeS

I installed Active Directory on a Server2003 VM.

I am trying to run IE under a different account. So I right click the IE exe and choose "Run As". Type in my account details, but I get this error:

Logon failure: the user has not been granted the requested logon type at this computer

So.... I spent the afternoon googling without success.
I tried updating the following by adding the accounts, but it hasn't worked:
Domain Security Settings - Local Policies - User Rights Assignment - Log on as a service

Is there anywhere else I should be looking?

coolpix23

It's a long shot...

I did the study for the Server 2003 and failed the exam, but in the CBT nugets course when he was talking about installing one of the extra servers, probably the Web server he showed a gotcha.

You'd imagine that security for IE would be controlled from control panel or a GP but it's already locked down in the add/remove components. For some of the features to work that IE use and I presume for some of the IE features to work, for a normal user account you have to go to add/remove components and there's an entry for IE there and that's where you need to adjust the security level.

Of course only if that's where your problem is coming from!

BTW if you're doing Microsoft exams at the moment check the Microsoft web site, Prometric sent me an email a couple of days ago about offers on the exams. Sometimes you need to already have an MCP but normally it's open to any one. The usual deal is pay for one exam and add 15% to get a "free" repeat or pay for two or more and get money off and a "free" repeat. They come up from time to time for all the Microsoft exams, not just the OS ones.

ressem

Have you looked at the group policy management console?

In particular there should be a group policy called default domain controllers policy which heavily restricts the users able to log on and run programs on a domain controller.

seamus

Can you log onto the server using the credentials that you want to run IE under?

http://support.microsoft.com/kb/841188

In Windows Small Business Server 2003, the "Deny log on locally" policy setting is applied to the Remote Operators group in the Default Domain Controllers Group Policy object. This policy setting also applies to the Domain Power Users group because the Domain Power Users group is a member of the Remote Operators group.

Check that group policy setting and then check if the account you're using belongs to any of the groups who are being denied a local logon.

D'Agger

I could be way off the mark but have you tried entering "office.local\" into the username field before entering your credentials?

matt-dublin

sounds like youre using a local account to run the install,

have you rebooted since installing AD?

you would need to run the install as a domain administrator now.