PLEASE help: After Changing User Rights can no longer logon on to machine

From: AP (nitalp@hotmail.com)
Date: 01/24/03 

From: "AP" <nitalp@hotmail.com>
Date: Fri, 24 Jan 2003 13:31:17 -0800

I have a Win2K (SvPk3) machine that's in a Domain. The
local machine has one local user account, and the local
Admin account. Both of these along with my Domain user
account are in the local Admin group. I logged onto the
local machine as the local user and changed the "Local
Secuity Settings"/"User Rights Assignment". I believe I
accidently added the local Admin group to the "Deny Logon
locally" because now no matter how I try to logon, i.e.,
with the local user or admin accounts or my Domain user
account, I get the msg: "The local policy of this system
does not permit yoiu to logon interactively". I tried
many many different ways to get around this, including the
Domain "super" Admin logon. But he couldn't access
the "Local Secuity Settings" or add a new user. He even
tried running "ntrights.exe" from the W2K Resource Kit but
was denied as well.

The machine is dual boot to WinNT.4/Svpk6 so I can get to
the hard drive. Is there something I can delete in the
Win2K directory? Or is there some utility that will
override these settings and let me reset things?

Thanks so much for your help.

Relevant Pages

  • Re: exdeploy dsscopescan problem
    ... Since you said you can add the account to ... > includes the exchange server i cannot connect to via exdeploy ... > service admin rights to all exchange site and configuration levels and to ... > usrmgr on the local machine, the account in the administrators group says ...
    (microsoft.public.exchange.setup)
  • Re: ADAM Service Account
    ... It provides just sufficient privileges on the local machine (admin is too much), and it also has sufficient permissions in the domain, to be able to register SPNs on the computer account, and to create SCPs. ...
    (microsoft.public.windows.server.active_directory)
  • Is there an Easier way to assgin users to groups?
    ... Click on Computer Management ... Under Computer Management > Local User and ... After restarting and logging on his/her account, ... permission as the Admin. ...
    (microsoft.public.windowsxp.security_admin)
  • Dmin group member ship keeps disappearing.
    ... couple of computers and adding admins to the local admin account. ... I have tried adding a local user account to the local computers' ... I reboot the computer. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: DCOM Hole Fix Suggestions
    ... After I log off as me, and log back in as the new local account (the local ... account with the same name as the domain server admin), ... network folder and try to access the server. ... > since I am an administrator on my local machine). ...
    (microsoft.public.security)