本地交互式登录禁用的处理办法_计算机网络安全

有网友称：发现一个新病毒，运行这个“病毒”之后无法登录系统，称病毒修改了登录口令。

　　拿到这个“病毒”之后，虚拟机中试着运行，重启提示“本地交互式登录被禁用”，显然，这不是修改登录口令，而仅仅是在本地安全策略中做了手脚。

　　恢复这样的系统，有多个办法：

　　1.系统还原当然最简单，这就不必说了（我说的是windows附件的系统还原，不是ghost或别的什么还原工具）

　　2.MMC调用组策略编辑器远程管理故障机，在计算机管理->安全设置->用户权限分配中检查右边的“允许本地登录”是不是把用户组给删除了，如果删除，再添加相应的用户组。

　　使用远程计算机修复的前提是可以远程连接故障机，我在测试中，死活没连上，甚至使用故障恢复控制台登录测试的虚拟机，将telnet服务和远程注册表服务都改成自动，再试还是失败。telnet连接故障机也失败。

　　无奈尝试了第三种技巧，然而这却是最简单的技巧。

　　3.在xp中，windows下的repair目录备份了注册表的关键数据，测试的这个恶作剧程序，显然是修改了安全配置，尝试将security恢复到c:\windows\system32\config目录下，重启就解决了。

　　只需要使用安装盘引导系统进入故障恢复控制台，再执行copy c:\windows\repair\security c:\windows\system32\config\security即可。

【以下内容为电脑知识网站提供英文翻译，未经授权请勿转载】

Someone said: discovered a new virus, to run this "virus" after not be able to sign, a sign that the virus modified password.

Get this "virus", the virtual machine running in trying to restart the tips of "local interactive login is disabled," Obviously, this is not modify the registry password, but only in the local security strategy Zuoleshoujiao.

Restoration of such a system, a number of ways:

1. System Restore course, the most simple, which do not have to say (I am talking about windows of the annex to the System Restore, the ghost is not any reduction or other tools)

2.MMC called Group Policy Editor remote management of fault, in computer management -> security settings -> user privileges in the distribution of the right of inspection "to allow local sign" is not the user to delete the group, if removed, then add the corresponding User group.

(More exciting content please visit the network computer knowledge www.pc235.com)

The use of remote computer repair on the premise that can connect remote fault plane, I test, not even on life and death, or even the use of fault recovery console sign the test virtual machine, telnet services and long-distance services into the registry automatically, try again Or failure. telnet connection failures planes also failed.

But try a third technique, but this is the simplest skills.

3. Xp in, windows of the repair of the registry backup directory of the key data, testing procedures of this prank is clearly modify the security configuration, will try to restore security to c: \ windows \ system32 \ config directory, restart Was resolved.

Only need to use the guidance system was installed into the fault recovery console, and then the implementation of copy c: \ windows \ repair \ security c: \ windows \ system32 \ config \ security can be.