Re: Local Security Policy settings have locked out Admin. account

From: Jason B. (jetjaguar15@yahoo.com)
Date: 06/16/02 

From: "Jason B." <jetjaguar15@yahoo.com>
Date: Sat, 15 Jun 2002 18:18:26 -0700

Thanks for your help with fixing my account problem. One
question though: What kind of file do I create? Do I do
that through notepad?

>-----Original Message-----
>On Fri, 14 Jun 2002 06:17:27 -0700, Jason B. wrote
><e77d01c213a5$d4494b60$9be62ecf@tkmsftngxa03>
>>On my home PC, running Win2K SP2, I went through last
>>night and changed some of the local security policy
>>settings. This morning, I tried to login with my account
>>(the only admin account setup on the pc), and got the
>>error message that the local security policy settings do
>>not allow me to login interactively. However, my wife,
who
>>is set as a power user, can still login and use the
>>computer normally.
>
>Any signs of a telltale grin? :)
>
>>Is there any way to reset the local
>>security policy to allow me to login again? The only
>>accounts setup on the pc are mine (admin)and my wife's
>>(power user). I've tried run as to get into the local
>>security settings through my wife's account, and have
been
>>unsuccessful so far.
>
>As a Power User, wife should have the ability to add a
Scheduled Task. Task Scheduler
>will impersonate an Administrator logon which should
bypass the deny logon locally
>access restriction. We can make wife a member of the
Administrators group, and then
>reset the Local Security Policy. Of course there may be
non-default restrictions
>you've placed on wife's account which will prevent this.
Wife should be able to start
>Task Scheduler from the Services snap-in (if it is not
already running) provided it is
>not set to disabled.
>
>Create a file on the desktop MY.CMD
>Make it one line as so
>NET LOCALGROUP Administrators "wife's user name" /ADD
>an example might be
>NET LOCALGROUP Administrators "Jane Doe" /ADD
>Navigate to C:\WINNT\Tasks
>Right-click Add Scheduled Task and choose Open
>Click Next
>Click Browse
>Browse to and select
>C:\Documents and Settings\Jane Doe\Desktop\MY.CMD
>Tick "One Time Only"
>Click Next
>Change the start time to a few minutes into the future
>Click Next
>In the fields provided enter
>Administrator (or Admin if you renamed Administrator)
>and password
>Click Next
>Click Finish
>Close Explorer
>
>Wait for the few minutes to pass.
>
>Log out and log back on as wife. You should be able to
undo any modifications using
>Administrative Tools | Local Security policy as wife
should now be a member of the
>Administrators group.
>
>When all is well, delete the scheduled task.
>
>Matt Scarborough 2002-06-15
>.
>

Relevant Pages

  • Re: Local Security Policy settings have locked out Admin. account
    ... >>>error message that the local security policy settings ... However, my wife, ... >>Right-click Add Scheduled Task and choose Open ... >>Administrator ...
    (microsoft.public.win2000.security)
  • Re: User setup
    ... Papa Jonah Wrote: ... I had to recreate the user profiles for my wife and I. ... However, when booting up, I only see Administrator, wife, and Papa ... I would like to delete the extra Papa account that shows up under ...
    (microsoft.public.windowsxp.security_admin)
  • Re: windows 2000 access permission problems.
    ... Check "effective" settings in Local Security Policy. ... check that you are actually logged on as an administrator and not a renamed ... account, and that the account you are logged on with is in the local ... administrators group on that server - sometimes you may find that the domain ...
    (microsoft.public.win2000.security)
  • Deleted Administrator account/ Need help
    ... In the Users account I had my account as Administrator and my wife with ... Limited right,some how by mistake I deleted my account "Administrator " Now ...
    (microsoft.public.windowsxp.security_admin)
  • Re: debugger user autochange
    ... One possibility is that Local Security Policy or the policy that enforces ... is renaming the administrator acount. ... rename administrator account. ...
    (microsoft.public.windowsxp.security_admin)