Re: How to reset local policy (w/o being able to logon locally nor to domain)

From: Steven L Umbach (n9rou@attbi.com)
Date: 03/17/03 

From: "Steven L Umbach" <n9rou@attbi.com>
Date: Mon, 17 Mar 2003 22:55:57 GMT

       One possibility if you can access the computer from the network via administrative share C$ or using mmc/gpedit.msc from another computer is to place a batch file on that compter that runs a secedit command to restore default security settings. Then you could modify the group policy on that machine remotely to run it as a startup script. Reboot and it should work. --- Steve

http://www.jsiinc.com/SUBL/tip5500/rh5571.htm

<chris@comcast.net> wrote in message news:slrnb7c88a.lmt.tony@universal.dca.net...
> Due to an error, I'm unable to log on locally from any local account)
> to a w2k workstation (due to the effective policy setting restricting
> local logon to a partcular domain group (of which the local accounts
> are not members of)).
>
> And, due to another error, I'm unable to log on to the domain (from
> any account, including domain admins, admins, domain administrator,
> nor the members of the domain who *do* have logon locally rights).
>
> The reason why I can't do this is that the machine accont was
> deleted. Even if I manually create the machine account from
> the AD (AD users and computers), the suspect machine is not
> joined to the domain to create the necessary trust relationship.
>
> I've tried NETDOM and NT rights w/o success.
>
> I'd like to reset the local policy (to its default, if possible).
> However, since I'm unable to access it locally and unable to
> login to the domain, I'm stuck.
>
> Q: How can I get into this machine an reset its local (logon)
> policy?
>
> Will a 'repair' of the OS (win2k pro) work?
>
> Many thanks in advance.
>
>

Quantcast