Re: The local policy of this system does not permit you to logon interactively

From: Doug Knox MS-MVP (dknox_at_mvps.org)
Date: 02/14/04 

Date: Sat, 14 Feb 2004 16:23:14 -0500

If you can't see it on the LAN, then you can't remotely access the registry.

Another possibility is an offline Registry editor

http://home.eunet.no/~pnordahl/ntpasswd/editor.html 

-- 
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
 
<anonymous@discussions.microsoft.com> wrote in message news:109f501c3f333$02ce1dd0$a501280a@phx.gbl...
> Doug, I tried all that you recommended with no luck.  I 
> cannot get access to my laptop from my desktop/lan.  
> REGEDIT doesn't recognize my laptop and neither does 
> xp_accountsid.vbs.  When I look at my network neighborhood 
> my laptop doesn't show up.
> 
> Any suggestions?
> 
> Thanks for your help.
> 
> Len
> 
> 
> >-----Original Message-----
> >Your password isn't the issue, its a registry restriction 
> that prevents your user (or user group) from logging into 
> the machine from the local console.  Is the machine on a 
> network?  Do you know someone that has a network that you 
> might be able to hook it up to?
> >
> >If you have access to the affected computer via a LAN 
> connection, from a Windows XP or Windows 2000 machine:
> >
> >On the other machine, click Start, Run and enter REGEDIT 
> (REGEDT32 on Windows 2000, and note REGEDT32 works 
> differently than Regedit)   Once there, go to File, 
> Connect Network Registry.   Type in the machine name of 
> the affected computer. You'll see another computer icon 
> listed at the bottom of the tree, with that machine name.  
> Expand it and go to HKEY LOCAL MACHINE\Security.  Right 
> click on the Security subkey and select permissions.  Give 
> Administrators "Full Control".  Press the F5 key to 
> refresh the view in REGEDIT.    Now you should be able to 
> see the subkeys under Security.   In the Security subkey, 
> go down to Policy\Accounts.  Look for the account that 
> matches yours. This is by the SID.  The SID is the number 
> that looks similar to this:
> >
> >HKEY LOCAL MACHINE\SECURITY\Policy\Accounts\S-1-5-21-
> 1606980848-1604221776-725345543-1014
> >
> >Your account will be one of the longer SID strings.  The 
> shorter ones are not user accounts.
> >
> >There is no way to tell from the contents of the keys, 
> which SID belongs to who.  You can download a small VBS 
> script from:
> >
> >http://www.dougknox.com/xp/scripts/xp_accountsid.vbs 
> >
> >This script will allow you to enter the machine name of 
> the problem machine and extract a list of SID's/User 
> information and display it in Notepad.  Do not use the 
> \\name convention, just enter the machine name.
> >
> >Once you've determined the correct SID for your user 
> account, right click the appropriate subkey and select 
> Export. This creates a backup, just in case.  Then right 
> click the same key and select Delete.    
> >
> >Next, right click the computer icon for the remote 
> computer and select Disconnect, to disconnect the remote 
> Registry.  You should now be able to log on locally to the 
> affected machine.  You may need to reboot the machine for 
> the change to take effect.
> >
> >If not, then reconnect to the remote computer's registry 
> and re-import the REG file you exported earlier.   And if 
> this doesn't work, your only option may be a paralell 
> installation of XP and then recover your data from the 
> problem system.
> >-- 
> >Doug Knox, MS-MVP Windows XP/ Windows Smart Display
> >Win 95/98/Me/XP Tweaks and Fixes
> >http://www.dougknox.com
> >--------------------------------
> >Per user Group Policy Restrictions for XP Home and XP Pro
> >http://www.dougknox.com/xp/utils/xp_securityconsole.htm
> >--------------------------------
> >Please reply only to the newsgroup so all may benefit.
> >Unsolicited e-mail is not answered.
> > 
> >"Len" <anonymous@discussions.microsoft.com> wrote in 
> message news:1067701c3f326$2522cb90$a401280a@phx.gbl...
> >> I have Windows XP Professional (tablet edition)running 
> on 
> >> my laptop.  I use to always logon as the Administrator 
> >> with no pw.  When I now try to logon I get the error 
> >> message "The local policy of this system does not 
> permit 
> >> you to logon interactively."  I tried logging in via 
> Safe 
> >> Mode but I still get this message.  
> >> 
> >> Any ideas on what I can do?
> >.
> >

Relevant Pages

  • Re: Connect Network Registry, Cannot open HKEY_LOCAL_MACHINE: Error...
    ... Remote registry administration in Windows XP Professional ... Before the upgrade everything works properly in Windows 2000, but after the upgrade we are unable to ...
    (microsoft.public.windowsxp.setup_deployment)
  • remote registry connection
    ... When the client pc was on windows 2000 i could remotely ... connect to their registry remotely. ... In Control panel, user accounts there is ... The remote registry service is ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Allow access to registry key
    ... MVP - Directory Services ... Windows 2003 Active directory ... key in the registry. ... power user group i dont get this error. ...
    (microsoft.public.windows.server.active_directory)
  • Re: XP Registry
    ... I am not 100% sure an older version of Windows such as 2k would be able to ... manage a newer version of Windows' registry... ... The remote registry service is running, ... > and my account is in the local admins group on the XP box. ...
    (microsoft.public.security)
  • Allow access to registry key
    ... Windows 2003 Active directory ... I want to allow the standard user group be able to have access to a certain ... Currently Im getting an error "Access to the registry ...
    (microsoft.public.windows.server.active_directory)