Administrator account not accessible

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I do not know how I did it but my machine will not let me login as
administrator. I get the message The local policy of this system does not
permit you to logon interactively. I have seen a few different fixes but
unfortunately the only account that let's me log in is my guest account which
has not authority to even open files let alone go into the control panel and
users folder to change anything let alone let me enter the Windows 2000
Active Directory.
I am on a stand alone computer and just wanted to put profiles up to protect
unwanted eyes on the files, now I am locked out without control
Can someone please help me get to my Admininistrator account again?
 
In group policy you enabled "Deny log on locally". This blocks you local
logon rights.

Try to use the RESOLUTION part of this KB to solve.

"The local policy of this system does not permit you to logon interactively"
error message when you try to log on to a computer that is running Windows
Small Business Server 2003 by using an Administrator account
http://support.microsoft.com/?kbid=841188

BR,
Denis
 
Logon as the guest, and type "runas /noprofile /user:compName\administrator
mmc" without the quotes in the run command.

Enter the administrator password when prompted and then add the computer
management snap-in to the MMC console. Create a new administrator account
to troubleshoot with or just check the policy to ensure you've not locked
yourself out as stated by Dennis.


--

Paul Williams

http://www.msresource.net
http://forums.msresource.net


in message In group policy you enabled "Deny log on locally". This blocks you local
logon rights.

Try to use the RESOLUTION part of this KB to solve.

"The local policy of this system does not permit you to logon interactively"
error message when you try to log on to a computer that is running Windows
Small Business Server 2003 by using an Administrator account
http://support.microsoft.com/?kbid=841188

BR,
Denis
 
Tried but can not get there. The login account, the only one that
works, will not allow access. All access to all areas is denied.
Even changing the internet account.
The resolution in the KB will not work on Windows 2000.
Now I have half installed another version of Windows 2000 so life just
get's better.
Now I have 2 questions:
1. How do you start the windows program without having to log in and
thus allowing you to get to the administration accounts?
2. How do you uninstall the half version of windows so the machine
will boot up without problems?

Thanks
 
Following your instructions so far, but can you explain how I go about
"add the computer management snap-in to the MMC console"?

I will check the KB while awaiting your reply.
 
If you runas mmc you will be presented with an empty MMC window. So, you go
to file\ add/remove snap-in and then add... and look for computer
management. When you find it, click add and follow the brief wizard. Ok
close whatever until you're back at the console.

I suppose there's nothing stopping you simply doing runas /noprofile
/user:computer\userName compmgmt.msc


--

Paul Williams

http://www.msresource.net
http://forums.msresource.net


Following your instructions so far, but can you explain how I go about
"add the computer management snap-in to the MMC console"?

I will check the KB while awaiting your reply.
 
Was able to logon as the guest and then run the command. I did not
know what to put for compName but using it as written brought up a DOS
looking box. I also tried it putting in what I think is my Domain
name which is a combination of letters and numbers. Both ways brought
up the box showing Enter password for either compName or the domain
plus the name administrator
Entering a password then brings up a box name console1 where I can add
the snap in computer management. When I do all this and even save it
and then go Create new user I am denied access. The snap in or box
name Console1 does not stay and when I reboot I have to access again
as guest.

Any other ideas to try When you add the snap in and then save save
the console is it supposed to stay put or do you have to add snap in
each time you need it
 
When i go to start/run and type in runas mmc (just that and nothing else) the
screen flickers the box but I do not get an empty MMC window. When I put in
the rest of the command line from your message saying log in as guest etc. I
get the runas.exe box with it looking for a password for administrator.
But if I just hit enter it opens up the console like I described in my
previous post.

I also looked at KB271135 and went to
regedit:HKEY_Current_USER\Software\Policies\Microsoft but that is as far as I
got there. My directory does not show the \MMC. My directory shows \System
Directory ans the next entry.
Does this seem right?
 
You need to use the Administrator account not the guest account.

--

Paul Williams

http://www.msresource.net
http://forums.msresource.net


When i go to start/run and type in runas mmc (just that and nothing else)
the
screen flickers the box but I do not get an empty MMC window. When I put in
the rest of the command line from your message saying log in as guest etc. I
get the runas.exe box with it looking for a password for administrator.
But if I just hit enter it opens up the console like I described in my
previous post.

I also looked at KB271135 and went to
regedit:HKEY_Current_USER\Software\Policies\Microsoft but that is as far as
I
got there. My directory does not show the \MMC. My directory shows \System
Directory ans the next entry.
Does this seem right?
 
You have to use the computer name of your computer. Go to start\run type
cmd and then type hostname. That's your computer name.

You need to use the administrator account to.

The MMC will need to be saved if you wish to use it again. Or you can, as I
do, and just add whatever snap-in you need when you need it.

Otherwise, you can launch actual snapins, e.g. compmgmt.msc, services.msc,
dnsmgmt.msc, etc.

If you're running XP you can go into control panel\ administrative tools and
right-click on a tool and choose run as.


--

Paul Williams

http://www.msresource.net
http://forums.msresource.net


Was able to logon as the guest and then run the command. I did not
know what to put for compName but using it as written brought up a DOS
looking box. I also tried it putting in what I think is my Domain
name which is a combination of letters and numbers. Both ways brought
up the box showing Enter password for either compName or the domain
plus the name administrator
Entering a password then brings up a box name console1 where I can add
the snap in computer management. When I do all this and even save it
and then go Create new user I am denied access. The snap in or box
name Console1 does not stay and when I reboot I have to access again
as guest.

Any other ideas to try When you add the snap in and then save save
the console is it supposed to stay put or do you have to add snap in
each time you need it
 
Slow Learner,

If you really did set the Local Policy setting to not allow the
Administrator to log on locally, you don't have a lot of options. The only
sure way I can think of would be to use your windows disk to boot into the
disaster recovery console. From there, you can change the registry key
controlling the Deny Log on Locally.

If this is a domain controller you could simply log in as the local
administrator and make the change in the Local Computer Policy console, but
I didn't get that sense from your first post.

In both cases, you need to have the passwords for full access (local admin
or recovery console). I do, however, get this feeling that this is the type
of question that someone with no administrator access would ask in trying to
circumvent the Administrator security. While there are ways to do that with
physical access to the machine, I'd caution anyone from posting a solution
that does not require at least one piece of credentials for the server -- at
least to the open newsgroups; that info is too readily available anyway.
 
Back
Top