DOS prompt and "user cannot log in locally..."

29 Mar 2005 11:03 PM

mblake

I'm getting the error "user cannot log in locally...". The documentation
from Technet suggest running a command from the DOS prompt to set
permission/rights. If I cannot login even as the administrator, how does one
enter commands at the DOS prompt? The server denies everyone from logging
into it.

30 Mar 2005 2:16 PM

Jerold Schulman

On Tue, 29 Mar 2005 15:03:01 -0800, mblake <mbl***@discussions.microsoft.com> wrote:

> I'm getting the error "user cannot log in locally...". The documentation
>from Technet suggest running a command from the DOS prompt to set
>permission/rights. If I cannot login even as the administrator, how does one
>enter commands at the DOS prompt? The server denies everyone from logging
>into it.

You can run ntrights remotely.

NTRights.Exe - Beta Version by Georg Zanzen
Grants/Revokes NT-Rights to a user/group
usage: -u xxx User/Group
       -m \\xxx machine to perform the operation on (default local machine)
       -e xxxxx Add xxxxx to the event log
       -r xxx revokes the xxx right
       +r xxx grants the xxx right
valid NTRights are:
SeCreateTokenPrivilege
SeAssignPrimaryTokenPrivilege
SeLockMemoryPrivilege
SeIncreaseQuotaPrivilege
SeUnsolicitedInputPrivilege
SeMachineAccountPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeSystemProfilePrivilege
SeSystemtimePrivilege
SeProfileSingleProcessPrivilege
SeIncreaseBasePriorityPrivilege
SeCreatePagefilePrivilege
SeCreatePermanentPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeShutdownPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeChangeNotifyPrivilege
SeRemoteShutdownPrivilege

See tip 3361 in the 'Tips & Tricks' at http://www.jsiinc.com

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com