I locked myself out by the mistaken security setting and had to search for the config file without any hint from the web UI.
Mine (Windows 7) is surprisingly in a different location: C:\Users\<user name>\AppData\Local\Jenkins\.jenkins
C:\Users\<user name>\AppData\Local\Jenkins\.jenkins