Re: Local policy logon interactively on remote laptop

anonymous_at_discussions.microsoft.com
Date: 07/12/04 

Date: Mon, 12 Jul 2004 12:44:57 -0700

Thanks for the response, Steve.

My last effort was to have him boot to the recovery
console in hopes of removing the policy file but he had
trouble getting the console to load (separate matter, it
seems). This is definately an unfortunate situation when
working with a user base that is 99% remote so it's not a
GP mistake we'll be making again.

I had him do the only other thing and arrange to ship it
back to the office. Once back on our LAN I should have a
better time with it.

Thank you again,

-Pete

>-----Original Message-----
>That is a bad situation and there is no easy way to
correct that without rebooting on
>the lan. Computer policy is not supposed to be easily
overridden. Removing a computer
>from the domain may be one way, but that is not an option
for him since he can not
>logon.
>
>Computer configuration also can applies to local user
accounts. If the local
>administrator was exempt from the policy, have him try to
logon as the built in local
>administrator account.
>
>Otherwise the computer will have to be brought back to
the lan or have the operating
>system reinstalled where he is at. A parallel
installation of the operating system or
>slaving the hard drive in another computer running W2K/XP
Pro would allow the user to
>access his data files before a reinstall. Note that
access to EFS encrypted files
>will be lost after a reinstall unless the user has backed
up his EFS private keys to
>a .pfx file or a Recovery Agent is available which may be
a domain
>dministrator. --- Steve

Relevant Pages

  • Re: Can no longer encrypt files
    ... The recovery policy as seen by the XP machine is bad. ... > and recovery agent's certificate. ... > This was working fine until the account password expired and was changed. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: POHMELFS high performance network filesystem. Transactions, failover, performance.
    ... the robustness reduces to the best it can do ... are queued or refused depending on policy. ... /home/user1, recovery might be configured to flag them as conflicts, ...
    (Linux-Kernel)
  • Re: Group Policy Not Applying to an OU
    ... I was using the Group Policy Management Console and in there I was ... console and accept the default Security Filter of "Authorized Users" ... The GPO did not apply. ...
    (microsoft.public.windows.group_policy)
  • Re: Impeach them both?
    ... removing the chief of the executive becomes a ... > undemocratically cumbersome from the IYPOV, ... one setting policy. ... Minor parties exist to mostly deny a major party the victory ...
    (alt.usage.english)
  • Re: change Network Policy on Win2000 PC?
    ... local machine and it just caused me to get more grey hairs. ... >> Is there a program name I should look for that is policy editor. ... > security Policy management snap-in to the console. ... The policies you set apply settings ...
    (alt.computer.security)