Re: Local security policy...

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 03/21/04

  • Next message: Steven L Umbach: "Re: Web site being redirected" 
    Date: Sun, 21 Mar 2004 01:27:02 GMT

    If you log onto another network computer with admin rights on the locked out computer
    you can use ntrights to remove the everyone group from that user right assuming you
    are talking about local policy. For a domain, create an OU with a GPO that has none
    or guest defined [not defined will not work] in the the deny logon locally righ and
    move that computer into that OU. -- Steve

    http://support.microsoft.com/default.aspx?scid=kb;en-us;315276 -- the user right is
    case sensitive. "ntrights -m \\computername -u everyove -r
    SeDenyInteractiveLogonRight" should work,

    "Samudrala Pradeep" <abc123@legmail.com> wrote in message
    news:107a401c40e55$ef293240$a301280a@phx.gbl...
    > Dear Sir,
    >
    > I am working as a network admin in Ashokleyland...
    >
    > My Issue:
    >
    > I had set local security policy "logon locally" for some
    > users...but whenI try to logon with some other users its
    > logging in...and logon loaclly I had given for 2 users...
    >
    > So, i set the policy "Deny logon locally" for "everyone".
    > So its not logging in with any user now....Pls guide me
    > through this...
    >
    > thanx and regs,
    > Pradeep S
    >

  • Next message: Steven L Umbach: "Re: Web site being redirected"