Re: Windows 2000 - Local policy - deny logon loccaly

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 02/10/04 

Date: Tue, 10 Feb 2004 07:46:14 -0700

You could either apply and overwriting setting for this policy
using a GPO at the Active Directory level, and then reboot the
troubled machine,
or you could
Map the system drive while logged in elsewhere as a domain
account that will be recognized as an admin on the troubled
machine. Then, go to the system32\grouppolicy folder in the
mapped drive and edit its NTFS security where you should
set a Deny of Full for Administrators.
Now, unmap the drive, go to the machine, log in as an admin,
remove the Deny, and edit the local policy to remove the settings. 

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Vladimir Benes" <benes@rsc.cz> wrote in message
news:%237AcHG97DHA.2472@TK2MSFTNGP10.phx.gbl...
>     Hello,
> I have this problem:  In Windows 2000 Proffesional, SP4, I have changed in
> Local policy settings -- deny logon locally. But, unfortunately, I
assigned
> there domain group "everyone", and now I cant logon neither normal user
nor
> LOCAL ADMINISTRASTOR!!!
>
> Can anybody help me please?
>
>

Relevant Pages

  • Re: Local Security Policy on domain controller?
    ... A google search for "security configuration templates" turns up a fair ... Some settings require a reboot and others don't. ... >> It's so close to affecting the local policy that I probably shouldn't ... >> it will affect local security policy, ...
    (microsoft.public.win2000.security)
  • Re: Replaing "lockdown" PCs with GPO
    ... the SCM only reset the computer settings and not the user configuation (at ... > local policy settings before letting GP manage the machine. ...
    (microsoft.public.win2000.active_directory)
  • RE: Performance Option.
    ... Yes i am doing this via Local Policy and it didn't ... images of the settings... ... display settings, i.e. w/o the Mickey-Mouse/Tele-Tubbies ...
    (microsoft.public.windows.terminal_services)
  • Re: local security policy in a 2003 Domain
    ... When settings are disabled like that in local policy, ... If I go in the local security policy,> security ...
    (microsoft.public.security)
  • Re: scripted logon
    ... Why can't you launch all the scripts from a Group Policy based Logon script. ... Here's the policy settings (I sure hope word wrap doesn't mess it up too ... Windows Components/Windows Installer ...
    (microsoft.public.windows.terminal_services)
Quantcast