Re: FOR A SKILLED IT EXPERT - WIN2K SERVER - DOMAIN CONTROLLER

You have told us this is with Windows 2000 server.
However, your subject says Domain Controller, but your message
says the change was in the local security policy, which is not used
on domain controllers.

What is it that you modified ?? If it was only the Log on Locally
and/or the Deny log on locally policies, then just edit the GPO
remotely over network with a domain admin account and reverse
the changes.

If there were a simple way to reset everything when the system
believes you are not entitled to do so it would not be a very
well planned system design now would it ?


"West-Wind-7" <WestWind7@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:8A59B55E-6062-429D-B146-F958EC25532B@xxxxxxxxxxxxxxxx
"The local policy of this system does not permit you to logon
interactively"

Hello Everyone - i made a small and insignificant change to the local
security policy. NO ERROR MESSAGE, that i would be locked out of the
server,
and for this i am very upset with MS.

Anyhow, i CANNOT logon with ANY USER, not even the built in Administrator
in
Directory Services Mode. This has been for over 10 days now. DO NOT WANT
TO
LOSE the profiles.

Does ANYONE know of a floppy boot up program that will RE-SET all Domain
Controller Security back to DEFAULT???

Re-setting the Password is not the issue.

How CAN all SECURITY be reset to default, via a boot-up floppy program to
allow logon normally again without this RIDICULOUS MESSAGE "The local
policy
of this system does not permit you to logon interactively"

SURELY, there is a way to easily reset the security?

Hope someone can suggest something...

Thank you and God Bless you...

West-Wind-7







.

Relevant Pages

  • RE: Cant set Local Security policies. They fail to save
    ... predefined Security Template on SBS 2003 to restore security groups ... run "gpupdate.exe /force" under command prompt to force the policy ... reboot the Server to test. ... and then logon to client computer to test if user can save system logs. ...
    (microsoft.public.windows.server.sbs)
  • Re: FOR A SKILLED IT EXPERT - WIN2K SERVER - DOMAIN CONTROLLER
    ... Windows Server 2003 one can, but not from a safe mode boot). ... boots up on cached profile only) The interactive logon problem has applied ... manual security reset. ... If you had not tried the reset we could have pulled you out of this, ...
    (microsoft.public.win2000.security)
  • RE: Logon Issue - could someone explain please
    ... I understand that you get security event 540 ... When a user connects to the shared folder on the SBS server, ... logon auditing, ...
    (microsoft.public.windows.server.sbs)
  • Re: Unknown Domain user - domain authentication appears limited
    ... (using cached login). ... Microsoft MVP (Windows Server System: Security) ... > due to the following error: Logon failure: the user has not been granted ...
    (microsoft.public.windows.server.security)
  • Re: Users no longer authenticate on W2k-svr
    ... Policy and go to security settings/local policies/user rights and make sure ... auditing of logon events on that server and then view the logs in Event Viewer ...
    (microsoft.public.win2000.networking)