Re: Windows 2000 - Local policy - deny logon loccaly

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 02/11/04


Date: Wed, 11 Feb 2004 07:12:52 -0700

Map the Admin$ or C$ share as an admin, then set a Deny
of Full for Administrators on system32\GroupPolicy in the
NTFS permissions. After this, log in as an admin, remove
the Deny, and edit the policy to get rid of the mistaken setting.

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Vladimir Benes" <benes@rsc.cz> wrote in message
news:%237AcHG97DHA.2472@TK2MSFTNGP10.phx.gbl...
>     Hello,
> I have this problem:  In Windows 2000 Proffesional, SP4, I have changed in
> Local policy settings -- deny logon locally. But, unfortunately, I
assigned
> there domain group "everyone", and now I cant logon neither normal user
nor
> LOCAL ADMINISTRASTOR!!!
>
> Can anybody help me please?
>
>