Re: Group Policy problem

my registry setting crashonauditfail is set to 0
its not working for me
any suggestions

thanks

"AllforLax" wrote:

Thanks Steve,

I was able to perform all the suggestions that you had.. Try them all, yet
we were able to correct that problem.. I can now edit the GPO after opening
that Active Directory.

What we did as listed below, but those have to be very careful is performing
this: go to link,

http://support.microsoft.com/default.aspx?scid=kb;en-us;316685

1. Start Registry Editor (Regedt.32.exe).
2. Locate and click the following registry key for the domain controller:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\CrashOnAuditFail
3. If the registry data type for CrashOnAuditFail is set to REG_NONE and the
data value is set to 2, change the data type to REG_DWORD, and then set the
data value to 0.

This step provides a temporary solution until you disable the Group Policy
setting.
4. Disable the following Group Policy setting on either the default domain
or the domain controller organizational unit:
Computer Configuration\Windows Settings\Security Settings\local
Policies\Security Options\Shut down your system immediately if unable to log
security audits
This policy can be found on the default domain policy, default domain
controller policy, and local security policy.

NOTE: Even if you disable this policy setting, make the registry change that
is described in step 2.
5. Disable security auditing.

If you cannot disable security auditing, archive the Security log and clear
the log.





"Steven L Umbach" wrote:

Try logging directly onto the pdc fsmo as a domain administrator to see if
that helps and look at the event and system logs via Event Viewer to see if
any pertinent info is found that may provide a clue. Also run the support
tools netdiag, dcdiag, and gpotool to see what is found that may also help
you pinpoint the problem. From the domain controller use My Network Places
to see if you can find the sysvol share which should be there and then you
should be able to access the sysvol share and navigate down through it. If
not you may have a problem with the sysvol share or permissions to it. Did
you change any Group Policy settings or security permissions that you think
may be contributing to the problem?? Offhand the error seems to indicate a
problem with dns, network connectivity, or the sysvol share.--- Steve


"AllforLax" <AllforLax@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:3971AEFA-9735-4C93-A40F-B99A117075EC@xxxxxxxxxxxxxxxx
I am unable to edit the GPOs.. Though I am able to open the Active
Directory,
I can not edit any GPOs. It seems that I locked out the administrator
account
by error. I will receive an error,

" Failed to open the Group policy Object. you may not have appropriate
rights. Deails: The network path was not found."

I woulld appreciate anyone that can assist me on thsi issue.. I am trying
to
avoid the possibility of rebuilding the server.

Thanks



.

Relevant Pages

  • Re: Microsoft Security & Configuration Tool (MSCT)
    ... > install into the server become problem. ... How to undo the security configuration that I had already applied ... basicsv.inf is the Domain Controller Security Policy, ...
    (microsoft.public.security)
  • Fwd: Oh Dear, Where to start?!
    ... It seems to me you need two things: an organizational policy, ... finish college and break into the real world of computer security. ... experience in the field of network security and policy ... updates, driver updates, and recommended updates. ...
    (Security-Basics)
  • Re: Group policy - another newbie question
    ... Domain Controller Security Policy is exactly that. ... > settings you see if you open Active Directory ...
    (microsoft.public.win2000.group_policy)
  • Re: Security - Compromised!
    ... policy, no auditing/intrusion detection, etc. So I would say top things are ... to have properly configured firewall (test with external security scanner) ... Changes could have been made at domain or domain controller ... clean it would be time to run dcpromo on your new server. ...
    (microsoft.public.win2000.security)
  • Re: display last login and unsuccessful login attempts
    ... and /or logon events is enabled for success and failure in Local Security ... Policy as explained in the first link below. ... domain controllers you need to enable auditing in Domain Controller Security ...
    (microsoft.public.win2000.security)