SBS creates a group called Power Users. The default SBS installation puts all users into this group. I could not log in to ssh with a normal userid but I could log in with the Administrator userid. I finally found that power users were denied “local log in” in the default Domain controllers policy.