Windows 2000 - Local policy - deny logon loccaly

[Vladimir Benes]

Hello,
I have this problem: In Windows 2000 Proffesional, SP4, I have changed in
Local policy settings -- deny logon locally. But, unfortunately, I assigned
there domain group "everyone", and now I cant logon neither normal user nor
LOCAL ADMINISTRASTOR!!!

Can anybody help me please?

 

[Roger Abell]

You could either apply and overwriting setting for this policy
using a GPO at the Active Directory level, and then reboot the
troubled machine,
or you could
Map the system drive while logged in elsewhere as a domain
account that will be recognized as an admin on the troubled
machine. Then, go to the system32\grouppolicy folder in the
mapped drive and edit its NTFS security where you should
set a Deny of Full for Administrators.
Now, unmap the drive, go to the machine, log in as an admin,
remove the Deny, and edit the local policy to remove the settings.

 

[Roger Abell]

Map the Admin$ or C$ share as an admin, then set a Deny
of Full for Administrators on system32\GroupPolicy in the
NTFS permissions. After this, log in as an admin, remove
the Deny, and edit the policy to get rid of the mistaken setting.

 

[Vladimir Benes]

Thank you very much for your answer. Problem solved...

 

[Vladimir Benes]

Thank you very much for your answer. Problem solved...