Applied a security policy to standalone XP and strange outcome

From: Gringo (bkey89_at_msn.com)
Date: 03/16/05


Date: 16 Mar 2005 05:11:51 -0800

First of all let me say that this is my first time ever posting to a
group of any kind so please be forgiving with my inexperience. After
many years I am changing career fields and going into IT.

Here's my situation...

I have an XPpro stand-alone machine that I was messing around with on
Snap-ins and the Security Analysis and Configuration. I don't remember
exactly but 99% confident that I imported and applied the Hisec
template.

Before the template was applied my user account was the local admin
account (which was set as admin from the start when I installed XP on
the machine)and I had 2 other limited user accounts plus 1 guest
account, all of which showed up on the Welcome screen.

After I logged off I noticed that my user did not show up on the
welcome screen and neither did the guest account, instead, a
"Administrator" user appeared with the two limited user accounts on the
Welcome screen. I clicked to logon as the admin but was unable due to
not having the correct password (I have no clue what it would be
because I never setup and "Administrator" user for the machine.

So I began freaking-out and rebooted the system; now the welcome screen
only shows the two limited user accounts and that's it. Through
reading this group I found that I could press ctrl-alt-delete twice and
get the network login, which I did, and logged in with my user account
name no problem. HOWEVER, my user account is no longer set as an admin
account and I can't even view my system calendar much less anything
else.

I downloaded an image to make a boot cd to reset the admin password, I
will see if it works this evening, but I was wondering if anyone knows
what would cause my user to be "kicked out" of the admin group on a
stand alone machine???

Thanks again for the help and forgive me for being long winded and a
newbie.



Relevant Pages

  • Re: The Microsoft Search service cannot be administered under the present user accou
    ... When you changed the SQL-Service to run with Local User account (with admin ... rights), did you make this change in the SQL Server 2000 Enterprise Manager ...
    (microsoft.public.sqlserver.fulltext)
  • Re: I turned off UAC
    ... The User Access Control (UAC) can detect rootkits before they install. ... escalated to admin rights, the escalation to full-admin rights only last for the moment of escalation to do the task, and then the admin user is returned to being a Standard user again with Standard user rights only, not admin rights. ... Malware or a virus can only run under the context of the user account that is using the computer. ...
    (microsoft.public.windows.vista.general)
  • Re: Vista Bus to SBS2003R2 connectcomputer problems . . .
    ... Have turned off the User Account ... Control feature since this apparently locks some parts of the system drive ... Also tried all flavours of running the procedure with admin rights. ... Small Business Server Network Configuration Wizard: ...
    (microsoft.public.windows.server.sbs)
  • RE: Exchange Administration Question
    ... If you are using Exchange 2003 then the administrator account by default is ... admin or no and then adding the account to the ACL for a mailbox in ADUC by ... You can always remove the domain admin group from the membership in their ... If you remove the domain admin group from their user account then they will ...
    (microsoft.public.exchange.admin)
  • Re: Remote Administration
    ... not managing from the same admin ... By "remote Administration" I do not mean that I am sitting at home or on ... to install the Adminpak and the 'Exchange stuff' on an Admin workstation ... And when not doing that I would use my 'normal user account' to do the ...
    (microsoft.public.windows.server.active_directory)