local policy not interactive, win2k

[jjjjayd13]

i mistakenly changed a setting in my local policy. i'm using win2k pro.

when i try to logon an error message is displayed: local policy of this system does not permit you to logon interactivlely

how do i change the policy setting?

which policy setting do i change?😱😱 😱

 

[Psychoholic]

This is my guess, and I'm also assuming you changed this at the local level instead of a domain level.

Open Local Security Settings in Administrative Tools. You must be running with Administrator privileges.

Navigate to Security Settings->Local Policies->User Rights Assignment.
The key you're looking for is Log on Locally.

Make sure your user name or group is given the right to log on Locally.

 

[jjjjayd13]

thanks. but i am not able to logon!!!:Q

 

[Saltin]

I'm assuming this is a stand alone box.
You could attach a second system to the box and get around it that way.
If you don't have another admin level account to log onto, you are in big trouble. Like time to reformat trouble.
Welcome to the world of " don't change it unless you know exactly what it does".

 

[Psychoholic]

Saltin is right. I also assumed in my first post you hadn't locked out all of the accounts.
Security can be a good thing or a bad thing, depends on if you know about the change you're getting ready to make. Live and learn.

 

[jjjjayd13]

thanks much for the info.

additional info, i am dual booting, win98 and win2k, both fat32.

would i be able to correct this problem?
🙁

 

[Psychoholic]

You might. You'll need to import a registry hive. HKLM\Software\Microsoft\Windows NT\CurrentCersion\SeCEdit.

You'll find the hive you need in %systemroot%\system32\config. The hive you're looking for should be named system.

 

[KB]

I thought you couldn't ever block the default Administrator account from logging in unless you changed its password?

 

[Saltin]

<< I thought you couldn't ever block the default Administrator account from logging in unless you changed its password >>



If you use policy to take away the Admin accounts right to log on interactively you can

 

[Dark]

Besides what Psychoholic told u, make sure that the deny logon locally is not checked.

 

[Thor86]

You need to obtain a copy of the Win2k Resource Kit utility called NTRIGHTS.exe

Search for all relevant info on the Microsoft Knowledge Base, or Google.

If you can't find it, then let me know by emailing me at: thor@hypernet.ca.

 

[jjjjayd13]

thanks everyone.

i was able to change file secedit.sdb, per tip from JSI.

all is now well!😉🙂😎