Monday, December 17, 2007

Unable to login because of account restrictions

Here's the error I would get when login in with any of the users on the machine. It would occur in both normal and safemode even after using a linux live distro to reset the passwords and unlock the accounts.


Unable to Log You on Because of an Account Restriction

It turns out the problem was caused because the following registry value had been deleted:
HKLM\SYSTEM\ControlSet1\Control\Lsa\Authentication Packages

Normally it is set to "msv1_0", but had been changed when the system had gotten infected with a virus. During the cleanup process, I think I must have deleted that value.... and poof... no more logging in.
NtPasswd (http://home.eunet.no/pnordahl/ntpasswd/ ) is a really slick tool that I used to fix the problems. It's a linux live distro that's really small and boots quickly and comes with a fully functional registry editor! It also lets you reset passwords and unlock accounts.

7 comments:

vanquish said...

can you tell me what exactly you did? I have the same exact problem. I think I accidentally deleted the key and now I cannot log on. I tried using the utility to unlock the admin account and also cleared the password. Still doesn't work.

SA Stelmach said...

Likewise, I am having that same issue. Please please PLEASE help.

Joe said...

Ugggh... I got the Vumondo virus and the same thing happened to me. Somehow that registry setting got doinked...I also downloaded NTPASSWD, but I can't figure out how to correct the registry using their basic editor... please help... anyone! email me at joefullam@comcast.net

Tim W said...

I just found this out after a lot of searching online. ControlSet001 may not be your active Control Set. You will need to check HKLM\System\Select, and see what the value for "Current" is. If it is other than 1, you will need to go to that Control Set instead of ControlSet001. Also, if you blanked out your password, you may need to change the value of "limitblankpassworduse" in the same area as "Authenticaion Packages" to 0 before it will let you log in.

Despair said...

at step 2 of ntpasswd:
system
9
cd ControlSet001
cd Control
cd Lsa
nv 7 Authentication Packages
ed Authentication Packages
msv1_0
--q

TK said...

Thanks Despair!!! the commands you have listed worked out like a charm. the biggest obstacle was changing the limitblankpassworduse value. once that was set to 0...i was able to blank out both the user and admin...and i was finally allowed to log back in. Hopefull

Nicholas said...

Despair-
You are my freaking hero. I couldn't figure out how to fix the registry entry (that I mistakenly deleted while fighting a nasty virus) until I found your posting! Thanks a million! Thanks also Tim W and TK for the tips on control set and limitblankpassworduse. Finally back into my system for the first time in weeks thanks to you all!