Security

Ask something
Discussion Locked

How to default Local Policy Setting

0 helpful
5 replies

by jeruvy

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I was playing around with security policy's and apparently set one to 'deny interactive logon' to my admin account.

As a result I cannot log in using the admin account and it's the only account I have on the machine. I have a ME box that works that I could try to remote connect to the 2000 but not sure how I would login and use mmc remotely?

Any help would be appreciated.

5 replies

by cavedweller

Can you use a domain admin account?

Here's an important lesson. Always create a second admin account before you fool around with things like this. When you're done testing you can disable the second account.

by jeruvy

No, unfortunately I did not set up domains on it, there is a workgroup configured.

I had a second account set up but for some reason the permissions for that account have been configured to not allow connection to that machine?

Sigh, I really hooped myself this time =(

by nsa13

Yah. Not a good thing. hehe. Ok, you have three choices my friend.

1. Attempt a remote logon (type 3) and see if you can get to the registry. You'll need to create a registry file (.reg) with the fix and then execute it on the 2000 box.2. Use the recovery console. Logon as administrator and attempt a repair of the affected registry section. A restore from the old registry via the Win2000 CD will work here to (goto [R] Repair).

3. Reinstall. =)

Option 2 will get ya there............. {g}

by jeruvy

Hi there. Thanks for the effort but I have determined there is no way to repair this problem. The only solution was to reinstall W2KPro on another partition, leaving the originals intact. Then backup all the files possible, and then reformat and reinstall.

1. Remote login would have been the optimum solution, however there are no services installed to setup or configured to allow remote logon. Besides the security hive is locked down so a registry repair would not be trivial to my knowledge. It probably wouldn't work.

2. The Recovery Console did allow access to the system however it only allows the trivial commands present in the RC system, hence any tools that could have helped (NTrights, fixing the registry) could not be performed.

3. This anti-solution was the only recourse. Reinstall.

Thanks for the suggestions folks this one was a toughie. Unfortunately no solution solved the problem.

This discussion is closed to new replies.