Is there a ways to discard your security policy?

[gabu]

In attempting to solve a problem with our exchange backup agent not backing up exchange on a 2003 server, we ended up locking all of the users out of the domain. When anyone tries to log in they see:

The local policy of this system does not permit you to logon interactively.

I temperarily got all users logged on by adding them to the domain admins group. Now I have been fussing with the policies for hours and have not figured out what got changed where. Is there a way I can just ditch the whole policy in favor of what existed by default right after the install?

Thanks for your advice!

 

[minoad]

This may seem overly simplified, but htier are threee places this must be set on the Win2k machine.

Default Domain Policy
Default Domain Controller Policy
Local Policy

And if you use it
Group Policy

You must set 'Allow Log on Locally' to these users.

Micah A. Norman