changing entries in User Rights Assigment

[Guest]

I accidently changed
Local Computer Policy\Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignmen
on WinXP Pro (standalone/workgroup) machin
How do I change it back
Please hel

 

[Doug Knox MS-MVP]

The same way you changed it in the first place, via GPEDIT.MSC Otherwise, what setting(s) did you change?

 

[Guest]

I changed Deny Logon through Terminal Services
if I change it again through gpedit.msc it doesn't take it.
I rebooted no change (old settings are still there!)
i did gpupdate /target:computer /wait:0
followed by gpedit.msc and see it, to my dismay, the old settings are still there.

 

[Doug Knox MS-MVP]

You can try removing the restriction manually. Click Start, Run and enter REGEDIT Go to:

HKEY_LOCAL_MACHINE\SECURITY\Policy\Accounts

You may need to adjust permissions on these registry keys to allow Administrator access. Locate the appropriate user subkey. It will have an identifier something like:

S-1-5-21-1606980848-1604221776-725345543-1008

Right click this key and select Export. This creates a REG file that can be reimported if need be. Then right click the key and select Delete.

If you need help determining what SID belongs to what user, see http://www.dougknox.com/xp/scripts/xp_accountsid.vbs This small VBS file will generate a list, in Notepad, of the SID's on your system and what user or system account they belong to.

 

[Guest]

Doug
I'm having the same issue as (senthil). I tried following your instructions under REGEDIT and attempted to go to
HKEY_LOCAL_MACHINE\SECURITY-
This is as far as I got (running XP Pro). I believe we'll need to make a registry change as you've suggested but I simply can't get past the "SECURITY" folder

Any help would be greatly appreciated.

 

[Doug Knox MS-MVP]

You need to right click on the Security key and select Permissons. Add your user name to the list of users/groups and give yourself full control. Then click the Advanced button, highlight your username in the list and check the box Replace permission entries on all child objects................. Click Apply.

Now, OK your way out, and when you're back to REGEDIT press the F5 key. You should see the subkeys under Security now.

 

[Dean]

I am having the some problem you are having. I finally figured out how to
get past the "SECURITY" step.

To view the contents of the "SECURITY" folder right click on it, select
permissions and give the Administrators Full Control. I had to reboot and
then I could see the subkeys.

I hope this helps.

Dean

Doug,
I'm having the same issue as (senthil). I tried following your

instructions under REGEDIT and attempted to go to:

HKEY_LOCAL_MACHINE\SECURITY--
This is as far as I got (running XP Pro). I believe we'll need to make a

registry change as you've suggested but I simply can't get past the
"SECURITY" folder.

 

[Guest]

So I'm assuming after I can "see" the correct folder listing HKEY_LOCAL_MACHINE\SECURITY\Plicy\Accounts , then I can search for the particular subkey with identifier, such as what you've described. Will the subkey have a particular "text" next to it to ensure it is the appropriate key before exporting and deleting? I'm not quite sure what I'm searching for

Once again, thanks for the assistance.

 

[Doug Knox MS-MVP]

From my other post in this thread:

If you need help determining what SID belongs to what user, see http://www.dougknox.com/xp/scripts/xp_accountsid.vbs This small VBS file will generate a list, in Notepad, of the SID's on your system and what user or system account they belong to.