Locked out of Computer - "Deny logon locally = Administrator"

G

Guest

Please excuse the length of this post but I feel all the details might be
necessary.
I have a computer that has Windows 2000 Professional Edition installed in it.

While adding a router to My home, I called My Internet Service Provider
because I was having a problem setting it up. The Tech found out that My
cable modem had 2 IP addresses in it one of which was not theirs and not the
one for the router. He said that it looked like some other computer was
tapped into the modem on a remote connection. I explained to him that I do
not connect to My computer remotely at all. He said that a hacker may have
obtained access to My computer through that IP address.

After the Tech cleared out the modem, reset it remotely and helped Me
configure the router as a firewall, He suggested that I download and install
from Microsoft the Microsoft Baseline Security Analyzer which he said would
help protect the security of My computer even more. After downloading,
installing and running the MBSA it said that there was no Local Security
Policy set on this computer.

Reviewing instructions I found at Microsoft's web site on how to install a
Security policy, I picked one of the basic "*.inf" files and installed it.
After opening the "Administrator tools", "Local Security Settings", and then
"Local Policies" and then "User Rights Assignments", I did something REALLY
dumb...

I set ALL the Policies to "Administrator"!!!

So... You guessed it I locked Myself out of the computer by the policy "Deny
logon locally = Administrator". I have access to another computer that has XP
on it. I can take the hard drive from the one that has the problem and
install it into the one that has XP on it.

HELP!!! Is there any way to correct this???
(BIG Lesson learned here!!!!)

Mr. Gene
 
B

Bill Sanderson MVP

I think the basic fix for this is to reinstall Windows in a new folder, and
take ownership of the files from the old installation.

As long as you have a network, you can get access to your files, I believe,
but I believe that a reinstall will be needed to fix this.

I'm just back from a trip, and I think I may get some time later this
evening to research this a bit more--so don't do anything hasty yet.
 
B

Bill Sanderson MVP

http://support.microsoft.com/kb/276590

This may help you out. If you can get a local network connection to this
machine, and have the administrator credentials for it, and can download the
NTRights app referenced in this KB article, you should be able to get out of
this fix.

Log into another networked machine using the administrator credentials on
the Windows 2000 system--create an account, if necessary.

It looks like the latest version of ntrights is in this downloadable file:

http://www.microsoft.com/downloads/...69-57ff-4ae7-96ee-b18c4790cffd&DisplayLang=en



--
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top