Re: Logon difficulties after IISLockdown crash

From: Charles Otstot (saries@nc.rr.com)
Date: 12/31/02


From: "Charles Otstot" <saries@nc.rr.com>
Date: Tue, 31 Dec 2002 09:45:59 -0500


Hank,

It sounds like the admin ID was placed into the "Web Anonymous Users" group
and that the logon locally right was removed. Can you manage the server
remotely (i.e. run the Management Console from another system and
right-click "Computer Management", then select "Connect to another
computer")? If so, you can remove the admin ID from the Web Anonymous Users
group (and the Web Applications Group, if it's there) and that should take
care of you. I ran into this issue with an ID that was being used for a
website configured prior to lockdown and requiring authenticated access .
The lockdown process removed the "Logon Locally" right from the account (and
the Web Anonymous Users" group), yielding precisely the symptoms you've
encountered.
**Note...That system was an aberration, the symptoms did not occur on other
systems.

HTH,
Charlie

"Hank" <hank@globalmajic.com> wrote in message
news:073101c2b03f$e1af5e70$8df82ecf@TK2MSFTNGXA02...
Thanks Richard! I am logging on as admin and it goes into
applying settings -> to saving settings then back to the
ctrl-alt-del login screen. I am sure the permissions have
been changed, but to what degree to not allow me to log
in I do not know. IISLockdown was supposed to lock
certain users, but the admin? Well I am at a loss. I do
not know how to get in? Any suggestions? I have tried to
use last good config, safe mode to no avail. I need a
real MCSE (which I am not, just a developer pushed into
that role). Well crap...any suggestions, websites tools
etc would be greatly appreciated.

Hank

>-----Original Message-----
>Hi Hank,
>
>As part of the IISLockdown process it is possible to
change the security of
>the .EXE programs within C:\Winnt\System32 to prevent
anonymous/everyone
>access.
>
>Are you logging on as an administrator user or someone
with less privilages?
>If you logon as an Administrator it should be ok but I
am guessing that you
>are trying to run a program which you now do not have
access to and
>therefore the logon process will just terminate.
>
>Check to see if you are running any logon scripts. Also
make sure the
>USERINIT.EXE program has not been changed.
>
>Richard.
>
>--
>
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>You assume all risk for your use. © 2001 Microsoft
Corporation. All rights
>reserved.
>
>
>"Hank" <hank@globalmajic.com> wrote in message
>news:056f01c2b024$e434ec20$8df82ecf@TK2MSFTNGXA02...
>> Hello All,
>> I am having a bit of a problem logging on to our Web
>> server. Luckily all the services are running so the
>> websites are OK but I cannot log onto the machine. The
>> server will allow me to logon, it will say applying
>> changes then go to the saving settings and log me back
>> out. Any suggestions? I am at a loss. No error message
>> just won't let me in. Thank you for any help in this
>> matter...
>>
>> Regards,
>> Hank
>>
>
>
>.
>



Relevant Pages

  • Re: Logon difficulties after IISLockdown crash
    ... Hank ... >and that the logon locally right was removed. ... Web Anonymous Users ... >the Web Anonymous Users" group), ...
    (microsoft.public.inetserver.iis.security)
  • Re: Admin password being rejected
    ... This is when I created the 2nd admin account, just in case, and then I was able to logon with the 2nd admin account, change the original admin password and then relogon as original. ... Not sure why this has happened - had the server restart itself at 0600 thi morning but nothing indicative of the cause in the logs. ...
    (microsoft.public.windows.server.sbs)
  • Re: Administrator Cant Log on to Server
    ... Jeff Middleton SBS-MVP ... > Finished installing SBS, rebooted - Darn! ... from bitter> experience I had already configured a backdoor admin account and I could> logon with that. ... I found that I could log on to the domain> as Admin from a workstation, and also Logon as Admin via Terminal Services. ...
    (microsoft.public.windows.server.sbs)
  • Re: w98 cannot logon to W2K AD
    ... I also just discovered that IPC$ ... disappear few seconds after reboot. ... Admin$ and IPC$) ... client logon to local and access ...
    (microsoft.public.win2000.active_directory)
  • Re: w98 cannot logon to W2K AD
    ... I also just discovered that IPC$ ... disappear few seconds after reboot. ... Admin$ and IPC$) ... client logon to local and access ...
    (microsoft.public.win2000.active_directory)