Results 1 to 6 of 6

Thread: Deny Logon Locally

  1. #1
    Join Date
    Sep 2004
    Posts
    13

    Deny Logon Locally

    We have a Domain in our Office running with Windows Server 2003. There is a user whom I don’t want to see the domain hence I added his account to Deny Logon Locally under:

    Local Computer Policy>Computer Configurations>Windows Settings>Security Settings>Local Polices>User Rights Assignment>Deny Logon Locally
    After doing this surprisingly I am not able to login neither with my user account or the Administrator account. I tried to revert back but nothing is working. Somebody please help me to get logged in to the system.

  2. #2
    Join Date
    Sep 2004
    Posts
    136

    Re: Deny Logon Locally

    I think you can easily log into the local Administrator account by booting into Safe Mode.

  3. #3
    Join Date
    Jan 2006
    Posts
    7,109

    Re: Deny Logon Locally

    Thanks for the help buddy but it is not working in Safe Mode as well. Somebody also suggested me to boot the system in Recovery Console and reset the users profile using ntrights.exe. But unfortunately recovery console does not recognize ntrights.exe as well. Anything else you can suggest?

  4. #4
    Join Date
    Jul 2004
    Posts
    141

    Re: Deny Logon Locally

    I found a Microsoft Article describing the solution for this where you can put your Hard drive in some another windows computer. Before we can start the process, first of all create a backup copy of the contents of \windows\system32\config from the damaged system. Now go to Start, click Run, type REGEDIT, press Enter. click on HKEY_LOCAL_MACHINE and then select Load Hive from the File Menu. Select the file named "system" from the folder \windows\system32\config on the damaged system. Name the key xxx (or whatever, doesn't matter really).

    Here click the xxx key, you will find Setup key there, click the same as well and change its setupType to 2. Now change the CmdLine to cmd.exe and restart the original system. This time you will be greeted with a command window using which you can run ntrights or gpedit.msc.

  5. #5
    Join Date
    Oct 2011
    Posts
    1

    Re: Deny Logon Locally

    I know this thread is old, but i want to thank you.

    You saved my live! THANK YOU :)

    PS: Yes, this method works very well on Windows Server 2008 R2 Enterprise

  6. #6
    Join Date
    Dec 2011
    Posts
    1

    Re: Deny Logon Locally

    Thank you Harry Johnston

    I Saved my system by following your way.

Similar Threads

  1. Replies: 3
    Last Post: 17-08-2010, 09:06 PM
  2. Deny Log on Locally to some accounts through GPO
    By Hutchence in forum Active Directory
    Replies: 3
    Last Post: 08-11-2008, 01:25 AM
  3. Local Admin Account with Deny Logon Locally
    By manishdk in forum Windows Security
    Replies: 3
    Last Post: 04-09-2008, 06:17 PM
  4. Group Policy to deny PST
    By Charlie R in forum Active Directory
    Replies: 2
    Last Post: 03-05-2007, 03:13 AM
  5. Unable to logon to Windows XP locally - No logon box
    By Adriana| in forum MediaCenter
    Replies: 1
    Last Post: 12-03-2007, 09:15 PM

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Page generated in 1,714,253,526.97965 seconds with 17 queries