China DOS Union

WindowsXP Professional edition, after being infected with a virus and the virus being removed, but it is not known whether it was caused by the virus or a misoperation during removal, it cannot enter the system after restarting, and it prompts "You cannot log in due to account restrictions". Logging in with the system default Administrator account in safe mode is the same, in short, any account with administrator privileges cannot log in. The question is, can the account restrictions be removed by modifying the registry file or other methods under DOS?
Note: WinPE or console methods are not considered.

Why not use WinPE? Just change the user level with ERD Commander under WinPE directly.

Downloaded ERD Commander 2008, burned it to a disc and booted into the ERD Commander environment, but couldn't start the local .msc file. Can run mmc, but can't open the .msc file, saying the version is incorrect. Also didn't find other methods to modify the local security policy.

erd 2008 can only repair vista/2008.
Find an erd 2005.

Downloaded an ERD Commander 2005, but unexpectedly, it still can't run mmc. It says that at least IE 5.5 support is needed, but this ERD 2005 comes with Firefox 1.0?! Well, forget it. I'll just restore with Ghost. Actually, I went to all this trouble just to try other methods this time. This incident once again proves the trash nature of Windows!

It's not running the local MMC in ERD, but the computer management built into ERD Commander can modify the system information on the local hard disk.

I can't find the tool to modify account and security policies in ERD. The only related one is LockSmith, but that can only change passwords. There is a registry editor, but I don't know which part of the registry to modify.

There is a DOS tool called DOSPASS.EXE that can clear passwords of any 2000, XP users, and can access NT partitions without the need for other NTFS support. Sometimes it takes more than half an hour to find password information. It cannot retrieve passwords, only clear them.

This is not a password issue for me. And later I also tested, neither disabling the account nor denying local login for this account is the cause of this prompt. I don't know which setting would cause such a prompt. Let everyone study it.