To fix a properly secured NT machine with an error like this, use one of the
linux boot CD's. You must have physical access to use the tools, but you can
fix things easily. I don't remember the link, but I believe the name of the
one I use was "Ultimate Boot CD". It boots a menu, that then boots one of
about 100 different tools, among them, Registry Edit and Reset Administrator
Password.

If the BIOS is password protected such that you can't direct the machine to
boot from CD, then you have no choice but to reset the nvram (CMOS) on the
motherboard. Not a big deal if you documented your changes from default.

In any case, you can always get there from here, and not all of the paths
involve the format and restore keywords!

Dan

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Bruce Barnes
Sent: Friday, August 05, 2005 3:23 AM
To: [email protected]
Subject: RE: [IMail Forum] OT: HELP! WINDOWS LOCAL POLICY.




The NTRights contained within the MS W2K Resource Kit only works if REMOTE
PROCEEDURE SERVICES and REMOTE REGISTRY SERVUCES is running.

For SECURITY purposes, both of these services should be STOPPED, and
DISABLED, on all SERVERS and WORKSTATIONS.

If these services are running, on machines with PUBLICLLY ACCESSIBLE IP
ADDRESS and there is poor router and / or firewall security, they become a
loophole whereby hackers can attack and take over a network.

You can GOOGLE on REQUIRED NT SERVICES or REQUIRED 2000 SERVICES or REQUIRED
XP SERVICES for more information on which services are required and which
ones can be stopped without affecting the ability of a workstation or server
to do the job for which it was intended.  XP workstation is particularly
vulnerable if service pack 2 has not yet been applied because there is a
service that lets Microsoft "assist" a user with his or her machine that's
easily accessed by spyware and hackers.

Doing similar searches on Technet can provide similar information.

Stopping and disabling unnecessary services on servers and workstation both
saves resources and closes many of the security loopholes that are built
into the MS product line.

Always, make certain you are aware of the effect of stopping any services
before you log out of the machine.

Bruce Barnes
ChicagoNetTech Inc

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Lim Siew Yin
Sent: Friday, August 05, 2005 01:18
To: [email protected]
Subject: RE: [IMail Forum] OT: HELP! WINDOWS LOCAL POLICY.



MS W2K Resource Kit has a program called NTRights that allowed me to
remotely change policy.
Managed to tracked it down after some search.


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Troy Hilton
Sent: Thursday, August 04, 2005 10:14 PM
To: [email protected]
Subject: RE: [IMail Forum] OT: HELP! WINDOWS LOCAL POLICY.


So, what'd you do?

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Lim Siew Yin
Sent: Thursday, August 04, 2005 5:20 AM
To: [email protected]
Subject: RE: [IMail Forum] OT: HELP! WINDOWS LOCAL POLICY.


Whew... problem solved.   No worries.     :P


SY Lim.

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Lim Siew Yin
Sent: Thursday, August 04, 2005 5:35 PM
To: [email protected]
Subject: [IMail Forum] OT: HELP! WINDOWS LOCAL POLICY.



Hi ppl,

I am in HOT SOUP now.  I was playing w the windows local policy .. trying to
deny logon to the server for normal USERS.
I set deny logon to ENABLE for the group USER.

Now... as an Administrator.. i cant even logon.  *sob*  *faint*

I keep getting the mesg "The Local Policy of this system does not permit you
to logon interactively".

Arrghhh.... I am sooooo lost.. i dare not tell my boss...  *sweat drop*

What went wrong?  I thought I only deny USERS... why am I also not allowed
to logon?

Please tell me I have another way out other than to format it again....   :(


SY Lim the Desperate.



To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to