locked out of XP - third party utility ?

[Guest]

on an WinXP laptop used by a sales rep, the system will apparently not let
anybody logon locally even though the passwords have all been reset to blank.
it appears that it will only allow logons if it is a member of some domain (
there are about 15 domains that this laptop had been connected to ). and,
further, the usernames appear to be case sensitive ( i thought that windows
was not case sensitive for usernames, only passords ? ) and if one does not
enter a password within a minute or so it will lock-out the account as well.
is this done by WinXP or a third party utility ? and, if so, what is the
utility and is there any way around this to allow users to logon locally ? it
is a laptop so i am not sure why it would be configured to only allow access
on a domain (??). tia ...

 

[Steven L Umbach]

That sounds weird - username is case sensitive. It sounds like the user
right for logon locally may have been configured to be only domain users
maybe. Do you get a message like you do not right to logon interactively??
If so you could try to access the computer remotely and use the Resource Kit
tool ntrights to grant users the right to logon locally assuming you can
gain access as an administrator remotely [doubtful with a blank password]
and there is no firewall blocking access to file and print sharing. See the
link below about ntrights and keep in mind that user right you specify is
case sensitive. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;279664

 

[Guest]

If you have access to the physical machine you might try ERD commander to
reset the local Admin password. We use this utility all the time works great.

 

[Guest]

cool, thanks for the reply guys. that's another weird thing is that our tech
guys used some utility (?) to reset the passwords for all accounts to
'password' and the accounts still immediately get locked out either after
the first logon attempt or after a minute or so of just the logon screen
showing. so i am not sure how the sales rep (or anybody else for that
matter) used to logon unless its as was mentioned in the previous post that
they have to be remote logons - but for a laptop that would be sorta strange.

e.

 

[Guest]

for one account, and i am assuming this is the original admin account, we get
a message to the effect of 'your account has been disabled, please contact
your network administrator' and for the other four accounts i think that we
just get the standard logon failure message, although those accounts get
locked out too after the first attempt. keep in mind that this is after
resetting the passwords and trying to logon. so that is weird, but i think
that you are definately correct on the 'logon locally only for domain users'
thing.

e.

That sounds weird - username is case sensitive. It sounds like the user
right for logon locally may have been configured to be only domain users
maybe. Do you get a message like you do not right to logon interactively??
If so you could try to access the computer remotely and use the Resource Kit
tool ntrights to grant users the right to logon locally assuming you can
gain access as an administrator remotely [doubtful with a blank password]
and there is no firewall blocking access to file and print sharing. See the
link below about ntrights and keep in mind that user right you specify is
case sensitive. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;279664

on an WinXP laptop used by a sales rep, the system will apparently not let
anybody logon locally even though the passwords have all been reset to
blank.
it appears that it will only allow logons if it is a member of some domain
(
there are about 15 domains that this laptop had been connected to ). and,
further, the usernames appear to be case sensitive ( i thought that
windows
was not case sensitive for usernames, only passords ? ) and if one does
not
enter a password within a minute or so it will lock-out the account as
well.
is this done by WinXP or a third party utility ? and, if so, what is the
utility and is there any way around this to allow users to logon locally ?
it
is a laptop so i am not sure why it would be configured to only allow
access
on a domain (??). tia ...

 

[Steven L Umbach]

If you suspect the built in administrator account is disabled you could try
booting into Safe Mode to logon as local administrator. From reading the
thread there is definitely some weird things going on which could be third
party security or compromised computer, I would probably just rebuild the
computer after backing up the data. The major concern with XP Pro is if any
files are encrypted with EFS you may never be able to decrypt them now
unless there is a Recovery Agent configured for that computer and
vailable. -- Steve

for one account, and i am assuming this is the original admin account, we
get
a message to the effect of 'your account has been disabled, please contact
your network administrator' and for the other four accounts i think that
we
just get the standard logon failure message, although those accounts get
locked out too after the first attempt. keep in mind that this is after
resetting the passwords and trying to logon. so that is weird, but i
think
that you are definately correct on the 'logon locally only for domain
users'
thing.

e.

That sounds weird - username is case sensitive. It sounds like the user
right for logon locally may have been configured to be only domain users
maybe. Do you get a message like you do not right to logon
interactively??
If so you could try to access the computer remotely and use the Resource
Kit
tool ntrights to grant users the right to logon locally assuming you can
gain access as an administrator remotely [doubtful with a blank password]
and there is no firewall blocking access to file and print sharing. See
the
link below about ntrights and keep in mind that user right you specify is
case sensitive. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;279664

on an WinXP laptop used by a sales rep, the system will apparently not
let
anybody logon locally even though the passwords have all been reset to
blank.
it appears that it will only allow logons if it is a member of some
domain
(
there are about 15 domains that this laptop had been connected to ).
and,
further, the usernames appear to be case sensitive ( i thought that
windows
was not case sensitive for usernames, only passords ? ) and if one does
not
enter a password within a minute or so it will lock-out the account as
well.
is this done by WinXP or a third party utility ? and, if so, what is
the
utility and is there any way around this to allow users to logon
locally ?
it
is a laptop so i am not sure why it would be configured to only allow
access
on a domain (??). tia ...