Re: Local Policy restriction

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Thanks Steve. Yes, somehow I forgot that restriction. So, yes, definitely
psexec would work if access the computer from the network is not locked
down.

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
Check out http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Whitepapers and Utilities for all things Group Policy-related
Just Released! The new Windows Group Policy Guide from Microsoft Press!!!
Check it out at http://www.microsoft.com/mspress/books/8763.asp


"Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxx> wrote in message
news:eqhUJhB0FHA.2912@xxxxxxxxxxxxxxxxxxxxxxx
> Good thought but you could not manage security settings other than ipsec
> policy on that remote workgroup computer that way. What he could try is to
> use psexec from SysInternals to remotely run secedit on that computer to
> apply a security template that would fix the problem or probably the
> easiest way would be to use ntrights from the remote computer to modify
> the settings for logon locally or deny logon locally on the locked out
> computer. --- Steve
>
> http://support.microsoft.com/default.aspx?scid=kb;en-us;279664 ---
> ntrights.
>
> "Darren Mar-Elia" <dmanonymous@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:enB4YHA0FHA.3856@xxxxxxxxxxxxxxxxxxxxxxx
>> Depending upon what local security they modified, you may still be able
>> to connect to the machine remotely. Most likely they set the "log on
>> locally" right to exclude all users, which prevents an interactive logon
>> at the machine. If they did not also set the "Access this computer from
>> the network" right then you should be able to run the Group Policy Editor
>> MMC snap-in from another machine, select that machine with problems and
>> manage its local GPO remotely so that you can set its security back to
>> the original settings. Give that a try.
>>
>> --
>> Darren Mar-Elia
>> MS-MVP-Windows Server--Group Policy
>> Check out http://www.gpoguy.com -- The Windows Group Policy Information
>> Hub:
>> FAQs, Whitepapers and Utilities for all things Group Policy-related
>> Just Released! The new Windows Group Policy Guide from Microsoft Press!!!
>> Check it out at http://www.microsoft.com/mspress/books/8763.asp
>>
>>
>> "Janaka Sampath" <janakaj@xxxxxxxxxxxxxxxxx> wrote in message
>> news:%23rJigS7zFHA.2792@xxxxxxxxxxxxxxxxxxxxxxx
>>> Dear All
>>>
>>> Someone has change his local security policy in our workgroup machine
>>> and
>>> now no one can log in to this machine. It's not in a domain. On this
>>> windows
>>> 2000 professional service pack 4 installed. How can I chang this local
>>> policy without login in to the machine.
>>>
>>> Or is there any way to overwrite local security settings by taking the
>>> hard
>>> disk to a another machine.
>>>
>>> Please help me
>>>
>>> Thanks in advance.
>>>
>>>
>>
>>
>
>


.

Relevant Pages

  • Re: Group Policy Security setting could not be determined
    ... > Per user Group Policy Restrictions for XP Home and XP Pro ... >> Upon investigation of the Local Security Policies I receive this nasty ... >> All local security settings will be displayed, ... >> some unknown permission issue "is not accessible. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Group Policy Security setting could not be determined
    ... my problem as I am not receiving these error messages. ... Per user Group Policy Restrictions for XP Home and XP Pro ... > Upon investigation of the Local Security Policies I receive this nasty ... > All local security settings will be displayed, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: administrator unable to logon interactively
    ... thinking of time I used mmc group policy snap in to remotely manage group ... LOCAL security settings on the remote computer. ... > security settings via the Domain Controller group policy object? ...
    (microsoft.public.win2000.security)
  • Re: Group Policy Security setting could not be determined
    ... Per user Group Policy Restrictions for XP Home and XP Pro ... > Upon investigation of the Local Security Policies I receive this nasty ... > All local security settings will be displayed, ... > some unknown permission issue "is not accessible. ...
    (microsoft.public.windowsxp.security_admin)
  • problem with access rights starting services
    ... message when trying to get into Local Security Policy: ... The Group Policy security settings that apply to this ... indication will be given as to whether or not a given ...
    (microsoft.public.windowsxp.perform_maintain)