local policy blocking interactive logon

[Dieter Duwe]

Hi,

I have a problem. Someone set a local policy in a machine that denies
interactive logon for all users (including administrators).

The machine is not in a domain.

Do anyone know how can I fix this problem? I was thinking about accessing
the registry remotely using reg.exe, but, what is the key wich deals with
that?

Do anyone have an idea?

Thank you.

 

[David Fisher [MSFT]]

Hello Dieter.

You can use the NTRights resource kit tool to correct the local security
policy of the system (given that you are allowed to access it
remotely--'access this computer from the network' right).

279664 How to Set Logon User Rights with the Ntrights.exe Utility
http://support.microsoft.com/?id=279664

The name of the right is "SeInteractiveLogonRight".

The command will be:
ntrights -m \\client_machine_name -u username +r SeInteractiveLogonRight

David Fisher
Enterprise Platform Support

 

[Dieter Duwe]

It worked.

Thank you.

Hello Dieter.

You can use the NTRights resource kit tool to correct the local security
policy of the system (given that you are allowed to access it
remotely--'access this computer from the network' right).

279664 How to Set Logon User Rights with the Ntrights.exe Utility
http://support.microsoft.com/?id=279664

The name of the right is "SeInteractiveLogonRight".

The command will be:
ntrights -m \\client_machine_name -u username +r SeInteractiveLogonRight

David Fisher
Enterprise Platform Support