HELP!! Need to reset a domain controller security policy...

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Opps, I may have done a bad thing. On our WIndows 2000 SBS domain controller
security policy settings -> User Rights Assignments, I removed some
"*S-xxxxx" accounts. For example, under the "Log on as service" policy,
"*S-1-5-20" was listed there. It is not there any longer - as I removed it!
I think I may have misunderstood exactly what this account was - thinking it
was a bad account name (like what you see when one has been deleted...)

I am now worried that our system is not going to function properly...

How can I restore this? OR am i in luck and everything will be ok?? You can
not simply add it back in there... I tried!

I also removed same account from the "Replace a process level token" and
"Generate
security Audits" area.

I was trying to fix up a policy after receivong a ton of event log sourceID
1202 messages - which is related to account names assigned in policies not
mapping properly... Usually an issue with deleted accoutns but those
accoutns are still found in a policy somewhere...

Any help would be most appreciated!!!

Thanks!



.

Relevant Pages

  • Re: scheduled tasks wont run
    ... > It's a policy issue. ... > User Rights Assignments / Log on as a batch job. ... > The account used for the scheduled job must be listed under this ... >> The attempt to log on to the account associated with the task failed, ...
    (microsoft.public.windows.server.general)
  • Re: GPO causing client security logs to fill?
    ... a virus in play. ... settings to be applied on your client workstations. ... Group Policy is a complex and often misunderstood beast. ... I modified the account ...
    (microsoft.public.windows.server.sbs)
  • Re: The local policy of this system does not permit you to logon i
    ... Security policies were propagated with warning. ... Error 0x534 occurs when a user account in one or more Group Policy objects ... I have checked the security policies & the administrator profile is not ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO causing client security logs to fill?
    ... Unlink the Default Domain Controller Policy (As it was not previously ... settings to be applied on your client workstations. ... I modified the account ... So basically, the Account lockout threshold, account lockout ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO causing client security logs to fill?
    ... Possibly delete the Default Domoan Controller Policy (As it did not ... issues as it was about recoverying from a virus which appears to ... with client logon failures. ... I modified the account ...
    (microsoft.public.windows.server.sbs)