Re: Logon difficulties after IISLockdown crash

From: Hank (hank@globalmajic.com)
Date: 01/01/03 

From: "Hank" <hank@globalmajic.com>
Date: Tue, 31 Dec 2002 15:25:42 -0800

Thanks! Charlie. I will try on Thursday. This is the most
promising piece of info I have gotten so far. Thanks a
bunch again!

Hank

>-----Original Message-----
>Hank,
>
>It sounds like the admin ID was placed into the "Web
Anonymous Users" group
>and that the logon locally right was removed. Can you
manage the server
>remotely (i.e. run the Management Console from another
system and
>right-click "Computer Management", then select "Connect
to another
>computer")? If so, you can remove the admin ID from the
Web Anonymous Users
>group (and the Web Applications Group, if it's there)
and that should take
>care of you. I ran into this issue with an ID that was
being used for a
>website configured prior to lockdown and requiring
authenticated access .
>The lockdown process removed the "Logon Locally" right
from the account (and
>the Web Anonymous Users" group), yielding precisely the
symptoms you've
>encountered.
>**Note...That system was an aberration, the symptoms did
not occur on other
>systems.
>
>HTH,
>Charlie
>
>
>
>"Hank" <hank@globalmajic.com> wrote in message
>news:073101c2b03f$e1af5e70$8df82ecf@TK2MSFTNGXA02...
>Thanks Richard! I am logging on as admin and it goes into
>applying settings -> to saving settings then back to the
>ctrl-alt-del login screen. I am sure the permissions have
>been changed, but to what degree to not allow me to log
>in I do not know. IISLockdown was supposed to lock
>certain users, but the admin? Well I am at a loss. I do
>not know how to get in? Any suggestions? I have tried to
>use last good config, safe mode to no avail. I need a
>real MCSE (which I am not, just a developer pushed into
>that role). Well crap...any suggestions, websites tools
>etc would be greatly appreciated.
>
>Hank
>
>
>>-----Original Message-----
>>Hi Hank,
>>
>>As part of the IISLockdown process it is possible to
>change the security of
>>the .EXE programs within C:\Winnt\System32 to prevent
>anonymous/everyone
>>access.
>>
>>Are you logging on as an administrator user or someone
>with less privilages?
>>If you logon as an Administrator it should be ok but I
>am guessing that you
>>are trying to run a program which you now do not have
>access to and
>>therefore the logon process will just terminate.
>>
>>Check to see if you are running any logon scripts. Also
>make sure the
>>USERINIT.EXE program has not been changed.
>>
>>Richard.
>>
>>--
>>
>>This posting is provided "AS IS" with no warranties, and
>confers no rights.
>>You assume all risk for your use. © 2001 Microsoft
>Corporation. All rights
>>reserved.
>>
>>
>>"Hank" <hank@globalmajic.com> wrote in message
>>news:056f01c2b024$e434ec20$8df82ecf@TK2MSFTNGXA02...
>>> Hello All,
>>> I am having a bit of a problem logging on to our Web
>>> server. Luckily all the services are running so the
>>> websites are OK but I cannot log onto the machine. The
>>> server will allow me to logon, it will say applying
>>> changes then go to the saving settings and log me back
>>> out. Any suggestions? I am at a loss. No error message
>>> just won't let me in. Thank you for any help in this
>>> matter...
>>>
>>> Regards,
>>> Hank
>>>
>>
>>
>>.
>>
>
>
>.
>

Relevant Pages