Re: Loopback issues

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 01/28/05 

Date: Fri, 28 Jan 2005 07:40:31 -0700

I am guessing that the System does not check everywhere and
reapply permissions if/where it sees that both System and
Administrators has been removed from a needed grant.
If so, then yes, it likely is possible for the working of groups
policy to be interrupted by changes in ACLing (something I
have in the past used in order to interrupt application of bad
policies in order to get into the system). 

-- 
Roger Abell
Microsoft MVP (Windows  Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Mike Huff" <huffmt@adelphia.net> wrote in message
news:OeednUdlA9JmJGTcRVn-iw@adelphia.com...
> I finally got this to work on a Windows 2000 workstation and a different
XP
> workstation.
>
> I ran some sort of corporate provided security script about 18 months ago
on
> the troubled XP workstation and this also seems to affect workstations
built
> with a coporate provided image.
>
> Is it possible that some sort of security is set wrong on the local box
that
> would prohibit the loopback processing?  Some sort of security issue with
> reading the local policy or paplying anything other than th elocal policy
> for the User Configuraiton?
>
> "Mike Huff" <huffmt@adelphia.net> wrote in message
> news:zo-dnSer5_y6bGvcRVn-hg@adelphia.com...
> >I have an OU with 10 XP workstations in it.  2003 AD.
> >
> > 1 GPO applied, with Loopback Processing enabled and set to replace.SUS
> > policy set in Computer Configuraiton.
> > GPO in User Configuration has set to not display "My Computer" on
desktop
> > and not to display "Add/Remove Programs" in Control Panel.
> >
> > Computer Configuraiton portion of GPO is working fine (SUS, etc.), but
> > none of the User Configuraiton portion of the policy is being applied.
> >
> > Any ideas?
> >
>
>

Relevant Pages

  • RE: Remote Installation Services, DoOldStyleDomainJoin=Yes
    ... It appears that the policy had been set previoulsy but when the policy was ... > SP1 introduced additonal RPC and SAMR security and during the upgrade SP1 ... > updates that SP1 will be over written and thus the workstation will not have ... >> provide domain account credentials to join the computer account to the ...
    (microsoft.public.windows.group_policy)
  • Re: Local Security Policy Locked (or something?)
    ... at one time I may have been booting the server ending up ... for the local workstation. ... Failed to open IPsec policy storage Access is ... or not a given security setting is defined in group policy. ...
    (microsoft.public.windowsxp.security_admin)
  • Workstation can see out, but cannot see in!
    ... Local Security Policy Locked ... at one time I may have been booting the server ending up ... for the local workstation. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: SPNEGO 40961 & USERENV 1030 errors
    ... multiple newsgroups. ... >cannot query for the list of Group Policy objects. ... >in the workstation, ran dfsutil /purgemupcache as ... Permissions for the Security folder are ...
    (microsoft.public.windowsxp.general)
  • Re: Loopback issues
    ... I finally got this to work on a Windows 2000 workstation and a different XP ... I ran some sort of corporate provided security script about 18 months ago on ... > none of the User Configuraiton portion of the policy is being applied. ...
    (microsoft.public.windows.group_policy)