GPEdit.msc Query

Posted on 2006-03-24
Last Modified: 2010-08-05
I have a Windows 2000 PC that i need to log onto, on the domain but a previous user has locked it down so much apparently that we are unable to access it only as Admin.
Within Admin profile we can see that she has used the gpedit.msc local security policy to lock it down but within User Rights Assignment, there is nothing that stands out which it could be.
The NIC is fine in it and we can ping everything.
The PC was added to the domain previously before it was locked down.
Any idea what  i should look for her specifically ?
Question by:Brinny05
    LVL 57

    Assisted Solution

    by:Pete Long
    get a hold of the setup.inf administratove template - and apply it to this machine it will reset local policy back to day1 settings

    Author Comment

    Thanks Pete but this isn't exactly what i want.
    I'm up against a timeline here and would ideally like to keep the PC locked down as is but have one specific account to be able to log into it ? (all accounts on domain would be fine too though)
    LVL 57

    Expert Comment

    by:Pete Long
    secedit /configure /db old /cfg "c:\windows\system32\setup.inf" /overwrite /quiet

    Author Comment

    No joy with this Pete.
    I entered the above in the DOS Prompt and rebooted and tried to log in myself but no joy.

    When attempting to make an adjustment myself within the GPEdit.msc tool i get the message

    Security Template:
    Failed to save Local Policy Database

    Might this have some implications ?
    LVL 7

    Expert Comment

    Can you log in to the machine using Admin Account.
    Can you create new user's with Admin Previledges.
    LVL 52

    Accepted Solution

    There is a policy that denies local logons:
    Did you check that?

    Author Comment

    Thanks for your help lads.
    I got it sorted though.
    The PC had been imaged from another PC and the name of the PC hadn't changed so there was 2 PC's with the same name on the domain.
    Just created another resource and assigned this PC and different name.
    Can logon fine now

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Suggested Solutions

    NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
    In the modern office, employees tend to move around the workplace a lot more freely. Conferences, collaborative groups, flexible seating and working from home require a new level of mobility. Technology has not only changed the behavior and the expe…
    It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    7 Experts available now in Live!

    Get 1:1 Help Now