Re: Log on Locally

From: Christophe Cornil (cco@clear2pay.com)
Date: 07/19/02 

From: "Christophe Cornil" <cco@clear2pay.com>
Date: Fri, 19 Jul 2002 22:39:26 +0200

That's what I Thought, I can't access it mmc, even via the RUNAS: Logon
failure
:(((

AAARGGGHH

"blaxshep" <Jim_Campau@bausch.com> wrote in message
news:eRx$961LCHA.1748@tkmsftngp09...
> Try this:
>
> Logon to the machine as a standard user and use the runas command.
>
> at the command prompt type:
>
> runas /user:administrator mmc.exe
> or
> runas /user:administrator@domain.xyz mmc.exe
>
> this will ask for your password
>
> now you should have admin rights while running the console.
>
> when the mmc opens add the users and computers snap in and group policy
> snapin to reset the policy.
>
> I am not sure if this will work since I can not test it with out locking
> myself out but the logic is sound.
>
>
> "Christophe Cornil" <cco@clear2pay.com> wrote in message
> news:#DBMo7zLCHA.2052@tkmsftngp08...
> > Hi all,
> >
> > I'm in a deep sh***
> >
> > I made a mistake when configuring the Domain Controller Policy.
> >
> > Instead of giving the access to the network and th log on locally to the
> > Domain admin group, I didn't check very well and I add Domain admins to
> the
> > following policies: Deny log on locally, deny access to this computer
from
> > the network.
> >
> > The problem now is, I can't connect to my Domain controllers.... and I
> CAN'T
> > change anymore my settings in the policy snap-in... I have an access
> denied!
> > I tried with the ntrights.ex as described here:
> > http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q279664
> > with this exact command: ntrights -u Domain Admins -m \\machinename -r
> > SeDenyInteractiveLogonRight
> >
> > but it seems Domain Admins is not the rights word to use because I have
> this
> > error message
> >
> > Revoking SeDenyInteractiveLogonRight from Domain ... failed
> > (GetAccountSid(Domain)=1332
> >
> > Anyway, I don't think I have the right to change it
> >
> > PLease need a lot of help.
> >
> > Thansk in advance
> >
> >
>
>

Relevant Pages

  • Re: Log on Locally
    ... Logon to the machine as a standard user and use the runas command. ... at the command prompt type: ... snapin to reset the policy. ... I didn't check very well and I add Domain admins to ...
    (microsoft.public.win2000.security)
  • Re: Logon through terminal services
    ... However, when I put the information and tries to logon, it tells me: ... Policy to allow logon through terminal services, ... The server is a Small Business. ... If I give domain admins privilege to the user, ...
    (microsoft.public.windows.terminal_services)
  • Re: Log on Locally
    ... even if I do not have the rights to log on locally, ... > Logon to the machine as a standard user and use the runas command. ... > snapin to reset the policy. ... I didn't check very well and I add Domain admins to ...
    (microsoft.public.win2000.security)
  • Re: Local Policy Does not permit logon interactively ~ Urgent help
    ... "Jorge Silva" wrote: ... policy, do you think this could help? ... undefined and the logon locally setting has the domain admin group ... I added domain admins and adminstrator to the ...
    (microsoft.public.windows.server.active_directory)
  • Re: Automatically login a user from at
    ... RUNAS /? ... Well, given that, as an account admin, I am not authorized to logon as users ... I don't get where the batch file is actually running. ... Are the three remote computers workstations they will logon at, ...
    (microsoft.public.scripting.vbscript)
Quantcast