Re: Local Security Policy settings have locked out Admin. account

From: Jason B. (jetjaguar15@yahoo.com)
Date: 06/16/02 

From: "Jason B." <jetjaguar15@yahoo.com>
Date: Sat, 15 Jun 2002 18:35:37 -0700

I get the following error message when I try this:
0x80070005L: Access Is Denied
You do not have permission to perform the requested
operation.

>>-----Original Message-----
>>On Fri, 14 Jun 2002 06:17:27 -0700, Jason B. wrote
>><e77d01c213a5$d4494b60$9be62ecf@tkmsftngxa03>
>>>On my home PC, running Win2K SP2, I went through last
>>>night and changed some of the local security policy
>>>settings. This morning, I tried to login with my
account
>>>(the only admin account setup on the pc), and got the
>>>error message that the local security policy settings
do
>>>not allow me to login interactively. However, my wife,
>who
>>>is set as a power user, can still login and use the
>>>computer normally.
>>
>>Any signs of a telltale grin? :)
>>
>>>Is there any way to reset the local
>>>security policy to allow me to login again? The only
>>>accounts setup on the pc are mine (admin)and my wife's
>>>(power user). I've tried run as to get into the local
>>>security settings through my wife's account, and have
>been
>>>unsuccessful so far.
>>
>>As a Power User, wife should have the ability to add a
>Scheduled Task. Task Scheduler
>>will impersonate an Administrator logon which should
>bypass the deny logon locally
>>access restriction. We can make wife a member of the
>Administrators group, and then
>>reset the Local Security Policy. Of course there may be
>non-default restrictions
>>you've placed on wife's account which will prevent this.
>Wife should be able to start
>>Task Scheduler from the Services snap-in (if it is not
>already running) provided it is
>>not set to disabled.
>>
>>Create a file on the desktop MY.CMD
>>Make it one line as so
>>NET LOCALGROUP Administrators "wife's user name" /ADD
>>an example might be
>>NET LOCALGROUP Administrators "Jane Doe" /ADD
>>Navigate to C:\WINNT\Tasks
>>Right-click Add Scheduled Task and choose Open
>>Click Next
>>Click Browse
>>Browse to and select
>>C:\Documents and Settings\Jane Doe\Desktop\MY.CMD
>>Tick "One Time Only"
>>Click Next
>>Change the start time to a few minutes into the future
>>Click Next
>>In the fields provided enter
>>Administrator (or Admin if you renamed Administrator)
>>and password
>>Click Next
>>Click Finish
>>Close Explorer
>>
>>Wait for the few minutes to pass.
>>
>>Log out and log back on as wife. You should be able to
>undo any modifications using
>>Administrative Tools | Local Security policy as wife
>should now be a member of the
>>Administrators group.
>>
>>When all is well, delete the scheduled task.
>>
>>Matt Scarborough 2002-06-15
>>.
>>
>.
>

Relevant Pages

  • Re: Local Security Policy settings have locked out Admin. account
    ... >error message that the local security policy settings do ... wife should have the ability to add a Scheduled Task. ... We can make wife a member of the Administrators group, ...
    (microsoft.public.win2000.security)
  • Re: Running Scheduled Tasks Remotely Without Full Administrator Ri
    ... It seems that in order to CREATE a task, one must be an administrator. ... try to create the scheduled task with the test user. ... MCSA Windows 2003 server ... local security policy, but I am still getting an "ERROR: ...
    (microsoft.public.windows.server.general)
  • Re: Local Security Policy settings have locked out Admin. account
    ... Thanks for your help with fixing my account problem. ... >>error message that the local security policy settings do ... However, my wife, ... >Administrator ...
    (microsoft.public.win2000.security)
  • Re: Windows Update error resolution problem
    ... to the administrator group - hopefully not restircted. ... > Impersonate a client after authentication policy either. ... >> then click Local Security Policy. ... On the Local Security Settings tab, click Add User or Group, and then ...
    (microsoft.public.windowsxp.configuration_manage)
  • Re: XP Security Question
    ... options are grayed out in local security policy. ... to have to completely re-install to move from win2k to XP ... >administrator and the domain admins group has been ... >> EXCEPT that I can no longer do any kind of remote ...
    (microsoft.public.windowsxp.security_admin)