Dusko
Fri Nov 28 10:00:29 CST 2003
"MCP" <anonymous@discussions.microsoft.com> wrote in message
news:0a0301c3b5c2$86b1fbc0$a301280a@phx.gbl...
> Alright people i need some help here. I have a 'lab'
> set up in my house for training purposes. 1 DC, a couple
> member servers and a couple xp machines to the domain.
> Well I accidently added a group with no members to a log
> on locally to the DC and now i can't log on at all to the
> DC. None of the accounts can log on to this server now,
> including the admin acct. I can't get in via TS either.
> Please help. Any comments, ideas will be appreciated.
> I recently reloaded the OS too so it isn't backed up!
> Will i need to wipe it clean again and start over or is
> there something i am missing?
> Thanks,
1. Do not log on locally, but over the network from the machine that is
joined to your domain. If it is not, join it.
2. On your client computer install adminpak.msi which you can locate in
\i386 directory of your server CD (must be server, not XP or Win2kPro). If
your client is Win XP, download adminpak.msi for Win 2003 server from
Microsoft web site.
3. Open Administrative Tools, Domain Controller Policy. In Security
Settings, User RightsAssignments, open "Log on locally" policy. Edit this
policy to include administrators to log on locally.
4. Refresh policy:
On Win 2000: secedit /refreshpolicy machine_policy /enforce
On Win 2003: gpupdate /force
Alternatively, you may use Active Directory Users and Computers and add your
user account to the group you created for log on locally right.
Dusko Savatovic