Re: Loca Administrator "locked out"

Miha Pihler [MVP] ha scritto:
Hi,

Since this server is part of domain create new OU (e.g. Temp OU) and create new policy on this OU that will override local policy (e.g. make sure that in this policy local administrator is _not_ part of "Deny logon locally").
Move the computer account to this Temp OU and reboot Windows 2000 server and wait for it to refresh the policy.

It's not a "server" having this trouble, instead it is a client PC.
Now, I've created a "temp" OU and created a GP on it. In this GP, I've set "Deny logon locally" to be *enabled* but also *empty*. At the end, I've put the Computer account into that OU and rebooted it.

Any other things I would have to do?
.

Relevant Pages

  • Re: Loca Administrator "locked out"
    ... Since this server is part of domain create new OU (e.g. Temp OU) and create ... new policy on this OU that will override local policy (e.g. make sure that ... Administrator account "locked out" by means of the PCs local policies (the ...
    (microsoft.public.win2000.security)
  • Windows 2000 Server Policy not working on client XP pro machines
    ... I have a single windows 2000 server. ... tasks that I had restricted in the domain policy. ... I have tried creating a temp OU and temp ...
    (microsoft.public.win2000.security)
  • Windows 2000 Server Policy not working on client XP pro machines
    ... I have a single windows 2000 server. ... tasks that I had restricted in the domain policy. ... I have tried creating a temp OU and temp ...
    (microsoft.public.win2000.security)
  • Re: Cannot log out of RWW
    ... However when i was at the server, and tried typing in the FQDN, which points ... and rww would get stuck on the loading screens. ... So you need only give full control permission to Temp folder. ...
    (microsoft.public.windows.server.sbs)
  • Re: How to allow users to create groups and shares
    ... Add the user/group to the Computer configuration, windows settings, security settings, Local policies, "Allow logon locally" in the Default domain controllers policy and on a existing or new created policy for the member servers. ... Filtering: Not Applied ... check with GPMC on the server or from a client the policy settings. ...
    (microsoft.public.windows.server.active_directory)