Re: restore local security policy in win2003

From: Steven L Umbach (n9rou_at_N0sPaM-comcast.net)
Date: 09/20/04


Date: Mon, 20 Sep 2004 03:43:07 GMT

Make sure you are logged on as a member of the administrators group by using
the " net user username " command to view group membership for a username
or use " net localgroup administrators " to view membership of the local
administrators group. The other thing to verifiy is that administrators have
full control to \windows folder and subfolders. Look in Event Viewer to see
if there are any errors/warnings that may indicate what the problem is. See
the link below if nothing seems to work. It works on XP and W2K and should
on Windows 2003. You could use the secedit command as described and append
"areas /user_rights" to the end to restore only user rights. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;EN-US;313222

"Tien Tran" <TienTran@discussions.microsoft.com> wrote in message
news:9966E132-2D1F-4414-97DD-14B57FF6DD5B@microsoft.com...
> I log in as admistrator and try to open local security policy editor but
> receive "access denied" error therefore I can't edit the policy. how can I
> restore the security to the state after fresh installation? my 2003 server
is
> not part of domain
> Thanks for all the help!
>
> T.



Relevant Pages

  • Re: Help needed setting up roaming administrator
    ... Administrators group (just type in Administrators, don't browse for it, ... The reason I don't like this method is that membership is only ... your settings will be reapplied every time Group ... Policy is refreshed. ...
    (microsoft.public.win2000.security)
  • Re: Sucsss Audit - have I been hacked ?
    ... but I will add that just checking the membership of the local ... > Yes someone cleared the security log at the time indicated. ... > the local administrators group on that server to make sure that only ... There are devices you can use to lock an existing case ...
    (microsoft.public.win2000.security)
  • Re: Remotely Enumerate Network Shares / Permissions
    ... -What Users/Groups are part of the Administrators group on the server ... I know I can do this manually with the Shares MMC snap-in, ... To enumerate network shares you could use the command "net share". ... a scripting newsgroup. ...
    (microsoft.public.windows.server.general)
  • Autorun.inf generates Device not ready error...
    ... put in the open command (though I from the errors I am getting, ... fully viewable from Windows Explorer, and the verb's command works from ... test machine is a Win2k SP4 system, and other CD's Autorun just fine on ... administrator (e.g. belongs to the Administrators group). ...
    (microsoft.public.win2000.developer)
  • Changing Passwords
    ... I know that a member of the administrators group can ... change their password from the command line. ... Pete ...
    (microsoft.public.windows.terminal_services)