Re: MMC - admin locked out too

From: ericB (Cyber-Fiend@pacbell.net)
Date: 12/29/02


From: "ericB" <Cyber-Fiend@pacbell.net>
Date: Sat, 28 Dec 2002 17:54:41 -0800

Yea.. I was actually in a local security console, but the
options stated "users" & I interpreted that as
meaning "Users" as oppossed to "Aministrators"... guess I
interpreted wrong :(

Unfortunately, Redgedit was one of the areas I
restricted. I didn't want any other user on the computer
to be able to mess things up.. and now look _I_ am the
one who messed up :\

Any other suggestions? I'm locked out of Regedit, "All
Programs" and "Run" on the Start menu does not display,
the task manager has been disabled, Running/Authorship of
MMC not allowed, etc. Maybe I was just being too
paranoid???? :D

Once I DO get this corrected, my next question will be
how to make the above operations available to Admins
only. Obviously I tried the wrong method.

ericB

>-----Original Message-----
>When you use GPO's on a local machine, they're local
policies and apply to all users of the machine,
regardless of access level.
>
>For the Run command, open REGEDIT and do a find for
NoRun. When found, double click the value and make it
0. You may have to log off/logon. For the
Administrative access to the MMC's try:
>
>HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersi
on\Group Policy
Objects\LocalUser\Software\Policies\Microsoft\MMC
>
>Locate the RestrictToPermittedSnapins entry and change
it to 0.
>
>--
>Doug Knox, MS-MVP Windows XP/ Windows Smart Display
>Win 95/98/Me/XP Tweaks and Fixes
>http://www.dougknox.com
>--------------------------------
>Associate Expert
>ExpertZone -
http://www.microsoft.com/windowsxp/expertzone
>--------------------------------
>Please reply only to the newsgroup so all may benefit.
>Unsolicited e-mail is not answered.
>
>"ericB" <Cyber-Fiend@pacbell.net> wrote in message
news:018d01c2aed4$88bbbd20$d6f82ecf@TK2MSFTNGXA13...
>> I'm on my PC, a standalone PC, running WinXP, with one
>> Administrator acct, two accts with admin privileges,
one
>> acct with user privileges & the guest acct. I was in
>> MMC. I created a new console for security & was in
>> group/local policies, setting restrictions on what
could
>> be done on the computer by users. EVERYTHING I set
said
>> it was supposed to affect what users could or could
not
>> do. Such as restricting running MMC, no "Run" or
command
>> line, etc. I only wanted admins to have those
>> privileges. When I closed MMC, now, even I can't get
to
>> cmd line, Run cmd, or open MMC. It keeps saying talk
to
>> your system administrator. I AM the system
>> administrator. What happened?
>>
>> Did I mess up by setting those things that said
something
>> about "they work in Win 2000" ? Was I only supposed
to
>> set the one's that said WinXP? Please help.
>>
>> 1. How do I get the Run cmd to work now?
>> 2. After doing so, how do i get MMC to recognize my
admin
>> password?
>>
>> thanks
>> ericB
>.
>



Relevant Pages

  • Re: MMC - admin locked out too
    ... > Limit access to Regedit, MMC, command line, etc. & ... >>> Administrator acct, two accts with admin privileges, ... >>> acct with user privileges & the guest acct. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: MMC - admin locked out too
    ... For the Run command, open REGEDIT and do a find for NoRun. ... > Administrator acct, two accts with admin privileges, one ... > acct with user privileges & the guest acct. ... Such as restricting running MMC, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: MMC - admin locked out too
    ... Then, log off and back in as an admin, remove ... > Administrator acct, two accts with admin privileges, one ... > acct with user privileges & the guest acct. ... Such as restricting running MMC, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Problems with opening MMC Console
    ... > While logged into the machine as an Administrator, ... > Policy Objects sub key. ... > Unsolicited e-mail is not answered. ... >> Someone had played around with the MMC Settings. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Administrator account not accessible
    ... You need to use the Administrator account not the guest account. ... When i go to start/run and type in runas mmc ... > Paul Williams ...
    (microsoft.public.win2000.active_directory)