How to access "Local security Setting" Remotly

[Viju Mathai]

I have a user who installed something on his Windows 2000
Professional SP3 machine and now it will not allow anyone
to log into the PC (neither local nor domain users). You
can remotely access the drives and files. Looks like
something got changed on the "Local Security Setting".
Most probably it could be "Logon Locally" Policy, is what
I feel (I could be wrong). It gives us the error "The
local policy of the system does not permit you to logon
interactively"

I am trying to access the "Local Security Setting"
remotely and I don't know how. I have all security
permissions on the box, it would not let anyone login.

I know, I can rebuild the PC and restore his data and got
over this problem, but I would really like to know, how to
get into the "Local security Setting" remotely

We even tried sysprep. It did not touch the "Local
Security Settings"

Please Help

 

[Steven L Umbach]

Wow. Must be an epedemic or something latley. Any how. If it is a domain
machine, just configure your domain policy to be the same as a working
machine - usually users, administrators, everyone, etc for log on locally.
Then you need to also configure deny logon locally with an entry in case
that is the problem. Use the guest account if it is not used. Give it ten
minutes or so and reboot locked out computer. Domain settings will override
Local Security Policy. If it is not a domain machine, you have to use
secedit in a batch file to run on the problem machine as a startup script or
use nt rights. See my reply post dated 08/07/03 for "Locked out by local
policy" in this NG to see particulars on how to do that with secedit. ---
Steve