LOCAL SECURITY POLICY

[Ken J]

I'm running Win 2K on a local machine. My DOS patition is
NTFS. My two Adminisrtator accounts can't logon to the
machine. When logon is attempted a message of: "Local
security policy prevents access/logon..." pops up. The
other three non-admin accounts logon fine and win 2k runs
fine. The major problem is that the main account can't
gain access to the data under said account.

 

[Steven L Umbach]

Somehow your user right assignment for logon locally or deny logon locally has been
misconfigured. See the tip below for a possible solution. --- Steve

http://www.jsiinc.com/SUBG/TIP3300/rh3361.htm

 

[Curtis Clay III [MSFT]]

Hello,
This article may help you in regaing the right to logon locally to your
domain controller.

279664 How to Set Logon User Rights with the Ntrights.exe Utility
http://support.microsoft.com/?id=279664

It is quite possible that this right was removed from your domain at the
domain level. If this fails you can also reset the permissions for your
admin accounts and the entire domain using the following commandfrom the
domain controller...

"Secedit /configure /db C:\winnt\temp\temp.mdb /Cfg
c:\winnt\inf\defltdc.inf
/overwrite /areas /user_rights"

If you get the "Data is invalid" error, see the following...

256000 Error Messages After Importing Basicdc.inf into Group Policy
http://kb/article.asp?id=Q256000

This posting is provided "AS IS" with no warranties, and confers no rights.