Re: Can't change "Access this computer from the Network" Group Pol

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Florian,

Thank you so very much for the response. When I ran rsop.msc, I noticed that
there was an exclamation point next to Access this Computer from the Network.
In there, was a group (ADM) that does not exist on our servers. I don't know
how to remove it from this list.

I did however manage to get everything working again by performing the
following:

1. Login to Primary Domain Controller
2. Click Start->Administrative Tools->Domain Security Policy
3. Drill down to Local Policies->User Rights Assignment
4. Double-Click Access this Computer from the Network
5. Added Backup Operators, Everyone and Users to the list
6. Apply the Changes
7. Reboot the PDC

Not sure how those got removed in the first place. We are in the process of
installing Exchange 2007 so that may have something to do with it.

Any thoughts?

-- Val

"Florian Frommherz [MVP]" wrote:

Howdie Val!

Val schrieb:
When I select the local policy (Start->Administrative Tools->Local Security
Policy) option and check who has the 'Access this computer from the network'
right (from Local Policies -> User Rights Assignment), only the Administrator
shows up. When I try to change that and add EVERYONE, the button (Add User or
Group) and (Remove) are both greyed out. Note that I am logged into the
Server using the Administrator Account.

On a server that has that behavior, call rsop.msc. It's pretty likely
that there is a Group Policy coming from the domain that dictates this
settings so you can't change it locally.

Rsop.msc helps you track down the policy and change it (or have a change
request with one of your admins).

cheers,

Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Use a newsreader! http://www.frickelsoft.net/news.html

.

Quantcast