Deny Logon Locally

I was trying to prevent a user from seeing the Domain to Logon to.

I added the user's account to Deny Logon Locally in

Local Computer Policy>Computer Configurations>Windows Settings>Security
Settings>Local Polices>User Rights Assignment>Deny Logon Locally

Now I can't logon under the user's account, or the Administrator Account, or
my Administrators account.

Can someone help me get back into this machine?

Try booting into safe mode, this may allow you to log into the local
administrator account.

This does not work even in safe mode
using the Administrator account I get "The policy of this machine does not
allow you to logon interactively."

I also tried booting to the Recovery Console and using ntrights.exe to reset
the users profile, but the recovery console does not recognize ntrights.exe.
I also tried putting the hard drive into another machine and using
ntrights.exe, but then it asked for the sid number and gave an error 87 or 81.

I am probably going to have to reformat this hard drive.

There is a way around, given that you've got another Windows machine you can put
the hard drive into. Warning: this procedure is not supported by Microsoft, so
I can't promise it won't damage the system. However, if you're about to format
the disk anyway ...

First make a backup copy of the contents of \windows\system32\config from the
damaged system.

Run regedit, click on HKEY_LOCAL_MACHINE and then select Load Hive from the File
Menu. Select the file named "system" from the folder \windows\system32\config
on the damaged system. Name the key xxx (or whatever, doesn't matter really).

Open the xxx key, then the Setup key inside it. Change SetupType to 2. Change
CmdLine to cmd.exe. Shut down and boot to the original system. You should get
a command window from which it should be possible to run ntrights or gpedit.msc.

I just had a chance to try what you said. It really did work. I
opened up gpedit.msc and undid what I had done and then I opened regedit and
returned the registry key CmdLine to a blank. The Change SetupType was
already 0. I rebooted the machine and it works great.

You have saved a new computer and me from a lot of work. Thanks many times over.

[The-Master]

I know this thread is old, but i want to thank you.

You saved my live! THANK YOU :)

PS: Yes, this method works very well on Windows Server 2008 R2 Enterprise

[Moharram]

Thank you Harry Johnston

I Saved my system by following your way.