Re: unable to change local user rights assignment policy

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Chris,

"Chris Forzetting" wrote:
servers, including the PDC, I was able to remove my account from the list of blocked accounts, but on at least two of them, the option to change the list is greyed out. I checked the domain security policy and the domain controller security policy, and my account is not shown in them, which was the most common solution I found on line. Any ideas?

Greyed out options in Security Settings indicate that there is a domain Group Policy that defines that setting. I would suggest you run rsop.msc in planning mode to get an overview of what policies are applicable to the server(s) in question. From that list, you can find the GPOs that are "active" for the machine.

As a side note: please don't make the same mistake the other admin did - don't use local GP for things like that. Define logon restrictions in a domain GP.

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste


.

Relevant Pages

  • Re: Disable posix and os2 subsystems
    ... optional subsystems and define it with no subsystems listed. ... Security Policy can be opened via secpol.msc and security policy can also be ... managed on a group of computers in a domain via Group Policy. ...
    (microsoft.public.win2000.security)
  • Re: DMZ NT4 TO Internal 2000 AD One-Way Trust via Firewall
    ... leverage an effectivity security policy to ensure that password complexities ... > currently a mess of local and domain users, no security policy, etc. ... DMZ, not publicly accessible) that aren't going away within the stated ... to non-DC web servers in the DMZ on 80 and 443 - none of which are directed ...
    (microsoft.public.windows.server.active_directory)
  • RE: [fw-wiz] PIX vs Checkpoint vs Sonicwall vs Netscreen - comme nts?
    ... > Checkpoint propaganda stuff. ... > spent most of my security consulting career trying to stomp out bloated ... >>All NetScreen appliances rely on custom-designed ASICs (Application ... >>Specific Integrated Circuits) for security policy enforcement. ...
    (Firewall-Wizards)
  • Re: Support Sharon Angle
    ... was promoted to Deputy Assistant of Defence for ... International Security Policy by his administration. ... He was a political appointee of the first Bush admin. ...
    (rec.sport.golf)
  • Re: Okay.. what is going on here .. Security error?
    ... CAS assigns trust not based upon user credentials, ... against the security policy, and a permission grant is generated. ... you'll need to modify your security ...
    (microsoft.public.dotnet.security)