General discussion

Locked

Interactive Logon/Deny

By RBobcat ·
I sent 2 of my Tech's out to make some changes in the local policy's. Unfortunatlly they put "Everyone" in "Deny Local logon"

I have tried the MS Resource Ntrights.exe but that does not work ..

This conversation is currently closed to new comments.

7 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by BFilmFan In reply to Interactive Logon/Deny

If these systems are in a domain, you can override that setting by placing it in a GPO being pushed down by the domain or on the OU where the workstation objects exist.

Collapse -

by RBobcat In reply to

Not on Domain, but would work if it was. was looking for a quicker fix, ended up wiping

Collapse -

by sgt_shultz In reply to Interactive Logon/Deny

if that doesn't work you may have to install a parallel installation of win2ksvr and use it to add the everyone group back into the system32 folder?

Collapse -

by RBobcat In reply to

could work, was looking for a quicker fix, ended up wiping

Collapse -

by BeerMonster In reply to Interactive Logon/Deny

I'm assuming this is fixed by now but just in case.

When I had a similar problem it was due to a couple of smacktards from IBM who used one of the company servers to perform remote support on internal machines via terminal services. They were getting a bit territorial about anyone else using the server so one of them changed the local policy to deny local logon, assuming that as he was using a ts session he wasn't logging in locally so wouldn't be effected. end result everyone logged out.

What I did was create a script to apply a secedit template to reset security, and copy the template and script to the server. I then connected to the local policy of the server via mmc on another domain machine (obviously as an admin) which allowed me to access a subset of the policy objects (obviously otherwise I would just have reset the offending setting there and then), amongst which was the option to specify a startup script. So i specified my secedit script, rebooted and job done.....

Creating and applying secedit templates is covered in the secedit help files, accessible by typing secedit from the command line.

Collapse -

by RBobcat In reply to

was looking for a quicker fix, ended up wiping

Collapse -

by RBobcat In reply to Interactive Logon/Deny

This question was closed by the author

Back to Windows Forum
7 total posts (Page 1 of 1)  

Related Discussions

Related Forums