can not log in

[mc]

I changed the local security policy on windows 2000 and the next day when I
went to log in as the Administrator I got this message saying "the local
security policy of this computer does not allow you to log in interactivly."
I have tried logging in under safe mode and the guest account but the guest
account was disabled and the safe mode didn't work either. Now I can't log
in to my computer at all. Is there a way to get in and change the settings
back or somehow force the computer to log into an account?
Thanks,
JM

 

[Dave Patrick]

How to Perform an In-Place Upgrade of Windows 2000
http://support.microsoft.com/default.aspx?kbid=292175

What an In-Place Windows 2000 Upgrade Changes and What It Does Not Change
http://support.microsoft.com/default.aspx?kbid=306952

Be sure to apply SP4 and these two below to your repair install before
connecting to any network. Internet included. (sasser, msblast)
http://download.microsoft.com/download/E/6/A/E6A04295-D2A8-40D0-A0C5-241BFECD095E/W2KSP4_EN.EXE
http://www.microsoft.com/technet/security/bulletin/MS03-043.mspx
http://www.microsoft.com/technet/security/bulletin/MS03-049.mspx

Then

Rollup 1 for Microsoft Windows 2000 Service Pack 4
http://www.microsoft.com/downloads/...CF-8850-4531-B52B-BF28B324C662&displaylang=en



--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

 

[Meinolf Weber]

Hello MC,

Is it a domain controller? Then install adminpak on a client and check from
there to undo the changes.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

[mc]

This is a stand alone pc...we just tried the first step of the repair using
the cd but we are getting the same result and can not log in..
mc

 

[nesredep egrob]

A moment of madness or was it just the onset of something worse made me look at
errorsmart which promised to speed up my computer something drastic - yes it
showed that there was more than 1000 errors which could be corrected if I paid
the dues -
Well I did and promptly my favourite video editor was not available and I could
not reinstall it. The makers of the editor and I went into a lenghty email
session with no end result. Other things on my computer bothered me.

Help came in the way of a 10GB image of the OS partition dated before the
purchase of the magic program mentioned above. Hi presto - trouble cured.
I installed the update of the editor and all was thought to be well - however
Roxio 7.0 seemed to have been damaged. Not to worry, reinstalled and 'hp';
my beautiful 700 GB SATA raid array was missing as was also the CD's.
Even the Disk Manager showed no signs of anything else but my 2x 200 GB disks.

Saved the registry and looked for any instance of errorsmart. Also uninstalled
Roxio and did a similar deed to that in the registry. I also cleaned out any
occurence of Roxio in my folders and partitions.
That cleared up the trouble only to recur on a subsequent installation of Roxio,
this time the CD' were missing but the raid array had reappeared.
Finally installed W2K from disk, that would have cleared any trouble in
registry, hitched the Image to that which worked fine. Updated bits in Document
and Settings from a newer Image and back to normal, I thought.

Installed Roxio and again I had lost the CD's.

I have roxio 10 but it will not work on W2K - so what might you do. Buy and
install XP Pro (remember Roxio 7 did work on this computer) or do you have some
powerful magic to help me, please.

B|rge in sunny Perth, Australia

 

[Pegasus \(MVP\)]

I changed the local security policy on windows 2000 and the next day when I
went to log in as the Administrator I got this message saying "the local
security policy of this computer does not allow you to log in
interactivly." I have tried logging in under safe mode and the guest
account but the guest account was disabled and the safe mode didn't work
either. Now I can't log in to my computer at all. Is there a way to get in
and change the settings back or somehow force the computer to log into an
account?
Thanks,
JM

Do you remember the exact change you performed?

 

[Pegasus \(MVP\)]

I changed the local security policy on windows 2000 and the next day when I
went to log in as the Administrator I got this message saying "the local
security policy of this computer does not allow you to log in
interactivly." I have tried logging in under safe mode and the guest
account but the guest account was disabled and the safe mode didn't work
either. Now I can't log in to my computer at all. Is there a way to get in
and change the settings back or somehow force the computer to log into an
account?
Thanks,
JM

I did some poking around, changing the security policy in various
ways until I was unable to log in under any account. My subsequent
attempts to repair the damage were unsuccessful. They suggest that
the change affected both the security policy database (c:\winnt\security)
and the registry. Unless you have a full backup of these two items or
else an image of your installation (which I had), you are unlikely to
recover from this mishap. This would be a good time to consider
installing an imaging program, e.g. Acronis TrueImage.

 

[Meinolf Weber]

Hello MC,

If you know the exact setting you have changed, i think it will be possible
with a second machine in the same workgroup and the same account name to
open registry editor and undo the change. But for that, you need to know
the policy you changed and then find the specific regkey.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

[mc]

I do believe he has a backup...how would we install it? On another thought,
is it possible to put this hard drive into another machine as the slave, and
then swap files? Or since we may need to do a full reinstall anyway is there
a way to extract a file from the cd to override this security file (which
ever one it is)?
I think we will set up a network access after this...are there any specific
instructions on how repair this through a nework?
mc and jm

 

[mc]

computers are such fun.....
mc... in tampa. fl

 

[mc]

Do you remember the exact change you performed?

I went to the control panel, then to administrative tools, then to the local
security policy. I went to the local policies, and then to the user rights
assignment. I went to the setting for Deny Logon Locally and added
Administrators to that list. Then I hit ok and closed the window. The next
day when I went to logon as administrator I got that message.
Thanks,
JM

 

[Meinolf Weber]

Hello MC,

Try out this one (from another posting):

Open Regedit>File>Connect network registry>Connect to the affected host
Connect to your locked-down system as the local Administrator by connecting
to its root drive, which I assume is C. Type

net use \\win2kpro\c$ password /user:win2kpro\administrator
at the command line, where win2kpro is the name of your computer, and password
is the password of the local Administrator account. This connection should
work because now you're performing a network logon, and your accidental setting
denies only local logons. Now that you're logged on remotely as the Local
Administrator, open the MMC Computer Management snap-in, right-click Computer
Management (Local), then select Connect to another computer. Enter your computer
name, and click OK. In the Computer Management snap-in, open the \system
tools\local users and groups\groups\users container and delete Authenticated
Users and INTERACTIVE as members. Both of these members effectively add the
local Administrator account to the Users group (i.e., Authenticated Users
and INTERACTIVE implicitly include Administrator). Click Apply, then Close.

Now, you should be able to log on locally. When you do, open the Local Security
Policy snap-in and remove the Users group from the Deny logon locally policy.



Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

[mc]

Just as a fututre thought would this work if we have a second oerating
system installed to a logical drive?
mc

 

[mc]

I forgot to ask by what method do I open the regedit and is this on a
network computer or the affected computer?
mc

 

[Meinolf Weber]

Hello MC,

Think not, you need the problem machine running normally.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

[Meinolf Weber]

Hello MC,

You have to open it via Start, run and type regedit, then press enter. Because
you can not logon ofcourse on a second machine in the same workgroup.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm