can not log in

April 25, 2008

I changed the local security policy on windows 2000 and the next day when I

went to log in as the Administrator I got this message saying "the local

security policy of this computer does not allow you to log in interactivly."

I have tried logging in under safe mode and the guest account but the guest

account was disabled and the safe mode didn't work either. Now I can't log

in to my computer at all. Is there a way to get in and change the settings

back or somehow force the computer to log into an account?

Thanks,

JM

April 26, 2008

Re: can not log in

How to Perform an In-Place Upgrade of Windows 2000

http://support.microsoft.com/default.aspx?kbid=292175

What an In-Place Windows 2000 Upgrade Changes and What It Does Not Change

http://support.microsoft.com/default.aspx?kbid=306952

Be sure to apply SP4 and these two below to your repair install before

connecting to any network. Internet included. (sasser, msblast)

http://download.microsoft.com/download/E/6/A/E6A04295-D2A8-40D0-A0C5-241BFECD095E/W2KSP4_EN.EXE

http://www.microsoft.com/technet/security/bulletin/MS03-043.mspx

http://www.microsoft.com/technet/security/bulletin/MS03-049.mspx

Then

Rollup 1 for Microsoft Windows 2000 Service Pack 4

http://www.microsoft.com/downloads/details.aspx?amp;displaylang=en&familyid=B54730CF-8850-4531-B52B-BF28B324C662&displaylang=en

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.

Microsoft Certified Professional

Microsoft MVP [Windows]

http://www.microsoft.com/protect

"mc" wrote:

>I changed the local security policy on windows 2000 and the next day when I

>went to log in as the Administrator I got this message saying "the local

>security policy of this computer does not allow you to log in

>interactivly." I have tried logging in under safe mode and the guest

>account but the guest account was disabled and the safe mode didn't work

>either. Now I can't log in to my computer at all. Is there a way to get in

>and change the settings back or somehow force the computer to log into an

>account?

> Thanks,

> JM

>

April 26, 2008

Re: can not log in

Hello MC,

Is it a domain controller? Then install adminpak on a client and check from

there to undo the changes.

Best regards

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> I changed the local security policy on windows 2000 and the next day

> when I

> went to log in as the Administrator I got this message saying "the

> local

> security policy of this computer does not allow you to log in

> interactivly."

> I have tried logging in under safe mode and the guest account but the

> guest

> account was disabled and the safe mode didn't work either. Now I can't

> log

> in to my computer at all. Is there a way to get in and change the

> settings

> back or somehow force the computer to log into an account?

> Thanks,

> JM

April 26, 2008

Re: can not log in

This is a stand alone pc...we just tried the first step of the repair using

the cd but we are getting the same result and can not log in..

mc

"Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message

news:ff16fb6697a8f8ca75e075493b5a@msnews.microsoft.com...

> Hello MC,

>

> Is it a domain controller? Then install adminpak on a client and check

> from there to undo the changes.

>

> Best regards

>

> Meinolf Weber

> Disclaimer: This posting is provided "AS IS" with no warranties, and

> confers no rights.

> ** Please do NOT email, only reply to Newsgroups

> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

>

>> I changed the local security policy on windows 2000 and the next day

>> when I

>> went to log in as the Administrator I got this message saying "the

>> local

>> security policy of this computer does not allow you to log in

>> interactivly."

>> I have tried logging in under safe mode and the guest account but the

>> guest

>> account was disabled and the safe mode didn't work either. Now I can't

>> log

>> in to my computer at all. Is there a way to get in and change the

>> settings

>> back or somehow force the computer to log into an account?

>> Thanks,

>> JM

>

April 27, 2008

Re: can not log in

A moment of madness or was it just the onset of something worse made me look at

errorsmart which promised to speed up my computer something drastic - yes it

showed that there was more than 1000 errors which could be corrected if I paid

the dues -

Well I did and promptly my favourite video editor was not available and I could

not reinstall it. The makers of the editor and I went into a lenghty email

session with no end result. Other things on my computer bothered me.

Help came in the way of a 10GB image of the OS partition dated before the

purchase of the magic program mentioned above. Hi presto - trouble cured.

I installed the update of the editor and all was thought to be well - however

Roxio 7.0 seemed to have been damaged. Not to worry, reinstalled and 'hp';

my beautiful 700 GB SATA raid array was missing as was also the CD's.

Even the Disk Manager showed no signs of anything else but my 2x 200 GB disks.

Saved the registry and looked for any instance of errorsmart. Also uninstalled

Roxio and did a similar deed to that in the registry. I also cleaned out any

occurence of Roxio in my folders and partitions.

That cleared up the trouble only to recur on a subsequent installation of Roxio,

this time the CD' were missing but the raid array had reappeared.

Finally installed W2K from disk, that would have cleared any trouble in

registry, hitched the Image to that which worked fine. Updated bits in Document

and Settings from a newer Image and back to normal, I thought.

Installed Roxio and again I had lost the CD's.

I have roxio 10 but it will not work on W2K - so what might you do. Buy and

install XP Pro (remember Roxio 7 did work on this computer) or do you have some

powerful magic to help me, please.

B|rge in sunny Perth, Australia

April 27, 2008

Re: can not log in

"mc" <wcwall.awm@verizon.net> wrote in message

news:OmY5g4ypIHA.4888@TK2MSFTNGP04.phx.gbl...

>I changed the local security policy on windows 2000 and the next day when I

>went to log in as the Administrator I got this message saying "the local

>security policy of this computer does not allow you to log in

>interactivly." I have tried logging in under safe mode and the guest

>account but the guest account was disabled and the safe mode didn't work

>either. Now I can't log in to my computer at all. Is there a way to get in

>and change the settings back or somehow force the computer to log into an

>account?

> Thanks,

> JM

Do you remember the exact change you performed?

April 27, 2008

Re: can not log in

"mc" <wcwall.awm@verizon.net> wrote in message

news:OmY5g4ypIHA.4888@TK2MSFTNGP04.phx.gbl...

>I changed the local security policy on windows 2000 and the next day when I

>went to log in as the Administrator I got this message saying "the local

>security policy of this computer does not allow you to log in

>interactivly." I have tried logging in under safe mode and the guest

>account but the guest account was disabled and the safe mode didn't work

>either. Now I can't log in to my computer at all. Is there a way to get in

>and change the settings back or somehow force the computer to log into an

>account?

> Thanks,

> JM

I did some poking around, changing the security policy in various

ways until I was unable to log in under any account. My subsequent

attempts to repair the damage were unsuccessful. They suggest that

the change affected both the security policy database (c:\winnt\security)

and the registry. Unless you have a full backup of these two items or

else an image of your installation (which I had), you are unlikely to

recover from this mishap. This would be a good time to consider

installing an imaging program, e.g. Acronis TrueImage.

April 27, 2008

Re: can not log in

Hello MC,

If you know the exact setting you have changed, i think it will be possible

with a second machine in the same workgroup and the same account name to

open registry editor and undo the change. But for that, you need to know

the policy you changed and then find the specific regkey.

Best regards

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> This is a stand alone pc...we just tried the first step of the repair

> using

> the cd but we are getting the same result and can not log in..

> mc

> "Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message

> news:ff16fb6697a8f8ca75e075493b5a@msnews.microsoft.com...

>> Hello MC,

>>

>> Is it a domain controller? Then install adminpak on a client and

>> check from there to undo the changes.

>>

>> Best regards

>>

>> Meinolf Weber

>> Disclaimer: This posting is provided "AS IS" with no warranties, and

>> confers no rights.

>> ** Please do NOT email, only reply to Newsgroups

>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

>>> I changed the local security policy on windows 2000 and the next day

>>> when I

>>> went to log in as the Administrator I got this message saying "the

>>> local

>>> security policy of this computer does not allow you to log in

>>> interactivly."

>>> I have tried logging in under safe mode and the guest account but

>>> the

>>> guest

>>> account was disabled and the safe mode didn't work either. Now I

>>> can't

>>> log

>>> in to my computer at all. Is there a way to get in and change the

>>> settings

>>> back or somehow force the computer to log into an account?

>>> Thanks,

>>> JM

April 27, 2008

Re: can not log in

I do believe he has a backup...how would we install it? On another thought,

is it possible to put this hard drive into another machine as the slave, and

then swap files? Or since we may need to do a full reinstall anyway is there

a way to extract a file from the cd to override this security file (which

ever one it is)?

I think we will set up a network access after this...are there any specific

instructions on how repair this through a nework?

mc and jm

"Pegasus (MVP)" <I.can@fly.com.oz> wrote in message

news:uRcpCqEqIHA.1436@TK2MSFTNGP05.phx.gbl...

>

> "mc" <wcwall.awm@verizon.net> wrote in message

> news:OmY5g4ypIHA.4888@TK2MSFTNGP04.phx.gbl...

>>I changed the local security policy on windows 2000 and the next day when

>>I went to log in as the Administrator I got this message saying "the local

>>security policy of this computer does not allow you to log in

>>interactivly." I have tried logging in under safe mode and the guest

>>account but the guest account was disabled and the safe mode didn't work

>>either. Now I can't log in to my computer at all. Is there a way to get in

>>and change the settings back or somehow force the computer to log into an

>>account?

>> Thanks,

>> JM

>

> I did some poking around, changing the security policy in various

> ways until I was unable to log in under any account. My subsequent

> attempts to repair the damage were unsuccessful. They suggest that

> the change affected both the security policy database (c:\winnt\security)

> and the registry. Unless you have a full backup of these two items or

> else an image of your installation (which I had), you are unlikely to

> recover from this mishap. This would be a good time to consider

> installing an imaging program, e.g. Acronis TrueImage.

>

April 27, 2008

Re: can not log in

computers are such fun.....

mc... in tampa. fl

"nesredep egrob" <Long. -31,48.21 Lat. 115,47.40> wrote in message

news:fv8814545b7vtcr3bvk136mgg4b75edcuo@4ax.com...

>A moment of madness or was it just the onset of something worse made me

>look at

> errorsmart which promised to speed up my computer something drastic - yes

> it

> showed that there was more than 1000 errors which could be corrected if I

> paid

> the dues -

> Well I did and promptly my favourite video editor was not available and I

> could

> not reinstall it. The makers of the editor and I went into a lenghty email

> session with no end result. Other things on my computer bothered me.

>

> Help came in the way of a 10GB image of the OS partition dated before the

> purchase of the magic program mentioned above. Hi presto - trouble cured.

> I installed the update of the editor and all was thought to be well -

> however

> Roxio 7.0 seemed to have been damaged. Not to worry, reinstalled and 'hp';

> my beautiful 700 GB SATA raid array was missing as was also the CD's.

> Even the Disk Manager showed no signs of anything else but my 2x 200 GB

> disks.

>

> Saved the registry and looked for any instance of errorsmart. Also

> uninstalled

> Roxio and did a similar deed to that in the registry. I also cleaned out

> any

> occurence of Roxio in my folders and partitions.

> That cleared up the trouble only to recur on a subsequent installation of

> Roxio,

> this time the CD' were missing but the raid array had reappeared.

> Finally installed W2K from disk, that would have cleared any trouble in

> registry, hitched the Image to that which worked fine. Updated bits in

> Document

> and Settings from a newer Image and back to normal, I thought.

>

> Installed Roxio and again I had lost the CD's.

>

> I have roxio 10 but it will not work on W2K - so what might you do. Buy

> and

> install XP Pro (remember Roxio 7 did work on this computer) or do you have

> some

> powerful magic to help me, please.

>

> B|rge in sunny Perth, Australia

April 27, 2008

Re: can not log in

"Pegasus (MVP)" <I.can@fly.com.oz> wrote in message

news:ug$3YsDqIHA.4376@TK2MSFTNGP06.phx.gbl...

>

> "mc" <wcwall.awm@verizon.net> wrote in message

> news:OmY5g4ypIHA.4888@TK2MSFTNGP04.phx.gbl...

>>I changed the local security policy on windows 2000 and the next day when

>>I went to log in as the Administrator I got this message saying "the local

>>security policy of this computer does not allow you to log in

>>interactivly." I have tried logging in under safe mode and the guest

>>account but the guest account was disabled and the safe mode didn't work

>>either. Now I can't log in to my computer at all. Is there a way to get in

>>and change the settings back or somehow force the computer to log into an

>>account?

>> Thanks,

>> JM

>

> Do you remember the exact change you performed?

>

I went to the control panel, then to administrative tools, then to the local

security policy. I went to the local policies, and then to the user rights

assignment. I went to the setting for Deny Logon Locally and added

Administrators to that list. Then I hit ok and closed the window. The next

day when I went to logon as administrator I got that message.

Thanks,

JM

April 27, 2008

Re: can not log in

Hello MC,

Try out this one (from another posting):

Open Regedit>File>Connect network registry>Connect to the affected host

Connect to your locked-down system as the local Administrator by connecting

to its root drive, which I assume is C. Type

net use \\win2kpro\c$ password /user:win2kpro\administrator

at the command line, where win2kpro is the name of your computer, and password

is the password of the local Administrator account. This connection should

work because now you're performing a network logon, and your accidental setting

denies only local logons. Now that you're logged on remotely as the Local

Administrator, open the MMC Computer Management snap-in, right-click Computer

Management (Local), then select Connect to another computer. Enter your computer

name, and click OK. In the Computer Management snap-in, open the \system

tools\local users and groups\groups\users container and delete Authenticated

Users and INTERACTIVE as members. Both of these members effectively add the

local Administrator account to the Users group (i.e., Authenticated Users

and INTERACTIVE implicitly include Administrator). Click Apply, then Close.

Now, you should be able to log on locally. When you do, open the Local Security

Policy snap-in and remove the Users group from the Deny logon locally policy.

Best regards

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> "Pegasus (MVP)" <I.can@fly.com.oz> wrote in message

> news:ug$3YsDqIHA.4376@TK2MSFTNGP06.phx.gbl...

>

>> "mc" <wcwall.awm@verizon.net> wrote in message

>> news:OmY5g4ypIHA.4888@TK2MSFTNGP04.phx.gbl...

>>

>>> I changed the local security policy on windows 2000 and the next day

>>> when

>>> I went to log in as the Administrator I got this message saying "the

>>> local

>>> security policy of this computer does not allow you to log in

>>> interactivly." I have tried logging in under safe mode and the guest

>>> account but the guest account was disabled and the safe mode didn't

>>> work

>>> either. Now I can't log in to my computer at all. Is there a way to

>>> get in

>>> and change the settings back or somehow force the computer to log

>>> into an

>>> account?

>>> Thanks,

>>> JM

>> Do you remember the exact change you performed?

>>

> I went to the control panel, then to administrative tools, then to the

> local

> security policy. I went to the local policies, and then to the user

> rights

> assignment. I went to the setting for Deny Logon Locally and added

> Administrators to that list. Then I hit ok and closed the window. The

> next

> day when I went to logon as administrator I got that message.

> Thanks,

> JM

April 27, 2008

Re: can not log in

Just as a fututre thought would this work if we have a second oerating

system installed to a logical drive?

mc

<Meinolf Weber> wrote in message

news:ff16fb6697b278ca769750375822@msnews.microsoft.com...

> Hello MC,

>

> Try out this one (from another posting):

>

> Open Regedit>File>Connect network registry>Connect to the affected host

> Connect to your locked-down system as the local Administrator by

> connecting to its root drive, which I assume is C. Type

>

> net use \\win2kpro\c$ password /user:win2kpro\administrator

> at the command line, where win2kpro is the name of your computer, and

> password is the password of the local Administrator account. This

> connection should work because now you're performing a network logon, and

> your accidental setting denies only local logons. Now that you're logged

> on remotely as the Local Administrator, open the MMC Computer Management

> snap-in, right-click Computer Management (Local), then select Connect to

> another computer. Enter your computer name, and click OK. In the Computer

> Management snap-in, open the \system tools\local users and

> groups\groups\users container and delete Authenticated Users and

> INTERACTIVE as members. Both of these members effectively add the local

> Administrator account to the Users group (i.e., Authenticated Users and

> INTERACTIVE implicitly include Administrator). Click Apply, then Close.

>

> Now, you should be able to log on locally. When you do, open the Local

> Security Policy snap-in and remove the Users group from the Deny logon

> locally policy.

>

> Best regards

>

> Meinolf Weber

> Disclaimer: This posting is provided "AS IS" with no warranties, and

> confers no rights.

> ** Please do NOT email, only reply to Newsgroups

> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

>

>> "Pegasus (MVP)" <I.can@fly.com.oz> wrote in message

>> news:ug$3YsDqIHA.4376@TK2MSFTNGP06.phx.gbl...

>>

>>> "mc" <wcwall.awm@verizon.net> wrote in message

>>> news:OmY5g4ypIHA.4888@TK2MSFTNGP04.phx.gbl...

>>>

>>>> I changed the local security policy on windows 2000 and the next day

>>>> when

>>>> I went to log in as the Administrator I got this message saying "the

>>>> local

>>>> security policy of this computer does not allow you to log in

>>>> interactivly." I have tried logging in under safe mode and the guest

>>>> account but the guest account was disabled and the safe mode didn't

>>>> work

>>>> either. Now I can't log in to my computer at all. Is there a way to

>>>> get in

>>>> and change the settings back or somehow force the computer to log

>>>> into an

>>>> account?

>>>> Thanks,

>>>> JM

>>> Do you remember the exact change you performed?

>>>

>> I went to the control panel, then to administrative tools, then to the

>> local

>> security policy. I went to the local policies, and then to the user

>> rights

>> assignment. I went to the setting for Deny Logon Locally and added

>> Administrators to that list. Then I hit ok and closed the window. The

>> next

>> day when I went to logon as administrator I got that message.

>> Thanks,

>> JM

>

April 27, 2008

Re: can not log in

I forgot to ask by what method do I open the regedit and is this on a

network computer or the affected computer?