the local policy of this system does not permit you to logon interactively

[mike]

Hello,

I have a standalone computer running Windows 2000. It
has only 1 user account (administrator). When I try to
login (via ctrl-alt-del) it gives me an error message
of "the local policy of this system does not permit you
to logon interactively" and will not allow me to login
using the administrator credentials. No remote
connection has been set up. Can anyone help me get to
the desktop and give me access to the system again?
Thanks in advance

 

[Tim Springston \(MSFT\)]

It sounds like either the local security policy has been edited to either
remove the "Logon Interactively" user right, or to set a "Deny Logon
Interactively" user right for the administrative user explicitly.

There are some trojan virii which alter the user rights (removing all or
most settings) as well, so this could be a virus.

Can you logon as any user at all? If not, for a standaline machine, your
only option may be to reinstall Windows. Since there may be a suspicion of
a virus, I would recommend formatting the system and boot volumes prior to
reinstalling in order to prevent a reinfection.

 

[Eric Burke [MSFT]]

Mike,

You're sort of between a rock and hard place. It basically sounds like your
user has been removed from the logon locally right. But, if you can access
the server remotely you can use the ntrights.exe utility that comes in the
2k Resource kit(probably downloadable from www.microsoft.com) to grant your
user the right to logon. Reference article 315276 and add the Administrators
group to the SeInteractiveLogonRight right.