Domain Security Group Policy

From: JURBOP (anonymous_at_discussions.microsoft.com)
Date: 09/19/04

  • Next message: Harry Adinanta: "Re: GPO for 802.1x" 
    Date: Sat, 18 Sep 2004 17:52:31 -0700

    I am preparing for the MCSE 2000 Security exam (70-214),
    and one of the exercises I am to do is to Modify User
    Rights. I run a single domain, and when I open up Active
    Directory Users and Computers, right click the domain
    name, click on Properties, and click on the Group Policy
    tab to access the "Domain Security Group Policy", I am not
    able to EDIT this policy (EDIT is grayed out). I click on
    the policy Properties, then the Security tab, and I
    receive the warning message "You only have permission to
    view the current security information on Domain Security
    Group Policy", and when the Security screen comes up all
    of the user permission boxes and the change options (ADD,
    REMOVE, APPLY) are grayed out. Authorized entries are:
    Authenticated Users, Creator Owner, Domain Admins,
    Enterprise Admins, and System. None of these entries has
    FULL CONTROL access. I am logged on as Administrator, and
    I'm a member of the Domain Admin group. Both Domain Admin
    and System have Read, Write, and Create and Delete All
    Child Objects permissions, but no Full Control. I've tried
    various things to try and gain access which would allow me
    to EDIT this policy, but have not been able to. What can I
    do to obtain FULL CONTROL for this policy so I can EDIT
    it. Or am I not supposed to be able to Edit this policy
    from the Domain Properties area? Should I be doing this
    from the Security Configuration and Analysis snap-in tool
    from the MMC?? In the exercise I'm trying to complete, the
    Microsoft Press book I'm using states to go through the
    Domain Properties, click the Group Policies tab, then
    double click the Domain Security Group Policy which would
    bring up the EDIT screen, which I'm not able to do. Thank
    you.

  • Next message: Harry Adinanta: "Re: GPO for 802.1x"

    Relevant Pages

    • Re: lockdown desktop without Group Policy
      ... Group Policy settings. ... Logon as an administrator ... Right-click on the GroupPolicy folder and Properties - Security ... and enter "Edit Group Policy" for the name ...
      (microsoft.public.windows.terminal_services)
    • Re: Routing and Remote Access
      ... If it still does not work, it could be a Local Group Policy ... > far as security policy if you are having problem accessing a Remote Access ... > server while logged onto it you may be lacking privileges. ...
      (microsoft.public.windows.server.security)
    • Fwd: Oh Dear, Where to start?!
      ... It seems to me you need two things: an organizational policy, ... finish college and break into the real world of computer security. ... experience in the field of network security and policy ... updates, driver updates, and recommended updates. ...
      (Security-Basics)
    • Domain Security Group Policy
      ... I am preparing for the MCSE 2000 Security exam, ... name, click on Properties, and click on the Group Policy ... able to EDIT this policy. ...
      (microsoft.public.win2000.security)
    • RE: [fw-wiz] PIX vs Checkpoint vs Sonicwall vs Netscreen - comme nts?
      ... All NetScreen appliances rely on custom-designed ASICs (Application ... Specific Integrated Circuits) for security policy enforcement. ... supports a finite number of "rules" or "policies". ...
      (Firewall-Wizards)