Log on issue

[Guest]

The issue is that I activated "Deny logon locally" policy on my computer, so now I can't log into Windows at all, message: The local policy of this system does not permit you to logon interactively
What should I do? My system is Windows 2000 Pro, personal laptop not connected to any network
Thanks in advance for your help.

 

[Dave Patrick]

You can try;

How to Perform an In-Place Upgrade of Windows 2000
http://support.microsoft.com/support/kb/articles/Q292/1/75.ASP

What an In-Place Windows 2000 Upgrade Changes and What It Does Not Change
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q306952

Failing that you can backup your data from a parallel install, wipe the
drive and reinstall the operating system.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft MVP [Windows NT/2000 Operating Systems]

The issue is that I activated "Deny logon locally" policy on my computer,

so now I can't log into Windows at all, message: The local policy of this
system does not permit you to logon interactively.

 

[Pegasus \(MVP\)]

The issue is that I activated "Deny logon locally" policy on my computer,

so now I can't log into Windows at all, message: The local policy of this
system does not permit you to logon interactively.

What should I do? My system is Windows 2000 Pro, personal laptop not connected to any network.
Thanks in advance for your help.

It seems you have found a new and highly successful way of shooting yourself
into the foot. If you can reach the laptop via a network-connected machine
then the following will repair the damage:

1. Get a free copy of psexec.exe from www.sysinternals.com
2. Get a copy of ntrights.exe. It comes with the Win2000 Resource Kit.
3. Working from the networked PC, start a remote session on the
laptop with this command:
psexec \\laptop cmd
4. Run this command in the remote session:
ntrights -u "Everyone" -r SeDenyInteractiveLogonRight

However, if your machine is not configured for networking then you will
probably have to treat this event as a valuable lesson in what not to do on
a Win2000 PC.

 

[Guest]

Thanks Dave, Pegasus,

I know that was my fault, but I couldn't imagine that Windows would allow such a thing (limit access to the administrator), I was just trying to get rid of window showing up and asking user name, password each time you log in (i'm the only user of my computer), and definitely found the wrong way to do that.

As for In-place upgrade, didn't work out, always was detecting Installation.

Regards

----- Pegasus (MVP) wrote: -----

The issue is that I activated "Deny logon locally" policy on my computer,

so now I can't log into Windows at all, message: The local policy of this
system does not permit you to logon interactively.

What should I do? My system is Windows 2000 Pro, personal laptop not connected to any network.
Thanks in advance for your help.

It seems you have found a new and highly successful way of shooting yourself
into the foot. If you can reach the laptop via a network-connected machine
then the following will repair the damage:

1. Get a free copy of psexec.exe from www.sysinternals.com
2. Get a copy of ntrights.exe. It comes with the Win2000 Resource Kit.
3. Working from the networked PC, start a remote session on the
laptop with this command:
psexec \\laptop cmd
4. Run this command in the remote session:
ntrights -u "Everyone" -r SeDenyInteractiveLogonRight

However, if your machine is not configured for networking then you will
probably have to treat this event as a valuable lesson in what not to do on
a Win2000 PC.

 

[Pegasus \(MVP\)]

It may be perfectly valid for some machines to deny local logons, e.g. in a
high security environment. As far as your in-place upgrade: When you
re-install Win2000 then you get prompted for a destination folder. If you
specify something other than c:\WinNT then you will get a brand new
installation that is independent from your locked installation.

Thanks Dave, Pegasus,

I know that was my fault, but I couldn't imagine that Windows would allow

such a thing (limit access to the administrator), I was just trying to get
rid of window showing up and asking user name, password each time you log in
(i'm the only user of my computer), and definitely found the wrong way to do
that.

 

[Guest]

How and on which stade can I specify the destination folder? As I remember: all I have to choose is Standard or Advanced (with changing partitions) Installation, no other options, all the rest is going automatically, only to insert a second CD later.

Thanks

----- Pegasus (MVP) wrote: -----

It may be perfectly valid for some machines to deny local logons, e.g. in a
high security environment. As far as your in-place upgrade: When you
re-install Win2000 then you get prompted for a destination folder. If you
specify something other than c:\WinNT then you will get a brand new
installation that is independent from your locked installation.

Thanks Dave, Pegasus,

such a thing (limit access to the administrator), I was just trying to get
rid of window showing up and asking user name, password each time you log in
(i'm the only user of my computer), and definitely found the wrong way to do
that.

 

[Pegasus \(MVP\)]

- Set your BIOS to boot from the CD
- Boot from the CD
- You will get the prompt "To set up Windows 2000 now, press Enter".
Press Enter.
- After a few further prompts, you will get the message:
"Caution: A c:\WinNT folder already exists. To use a different
folder, press Esc."

If you now press Esc then you can specify the desired folder name,
and leave the original installation intact.

How and on which stade can I specify the destination folder? As I

remember: all I have to choose is Standard or Advanced (with changing
partitions) Installation, no other options, all the rest is going
automatically, only to insert a second CD later.