Re: Privilege Levels

From: Sundaram Narayanan[MSFT] (sunnar_at_online.microsoft.com)
Date: 11/12/04 

Date: Fri, 12 Nov 2004 08:16:18 -0800

There are probably some weird policies on the machine.

First double check if the administrator account is a member of the local
group Administrators.

Open MMC
Add the "Group Policy Object Editor"
Open "Computer Configuration\Windows Settings\Local Policies\User Rights
Assignment" and check at least the "Change the System Time" policy with the
defaults prescribed in Help and Support.

(To easily get to the help and support for group policy open
%WINDIR%\help\spolsconcepts.chm) 

-- 
This posting is provided "AS IS" with no warranties, and confers no rights. 
Use of included script samples are subjected to the terms specified at 
http://www.microsoft.com/info/cpyright.htm.
"Peter Marshall at OCC" <peter.marshall@ohiocoatingscompany.com> wrote in 
message news:ORDfU5KyEHA.924@TK2MSFTNGP10.phx.gbl...
>I have a Windows 2003 Server whose only role is a File Server (it's 
>actually
> a database server).  Even though this box belongs to a local domain, I log
> into this box with the local administrator account.
>
> When I execute a particular database client program, I always get a "File
> Download" warning that if "you do not fully trust the source, do not open 
> or
> save this file.  Would you like to open...".  The check box to "Always ask
> before opening this type of file" is grayed out so I can't uncheck it. 
> How
> do I fix this "problem".  BTW, I also get an insufficient privilege level
> message if I try to view/change the computer's time/date.  Does it make
> sense to make this server a member computer of my existing Win 2003 
> domain?
>
>

Relevant Pages

  • Re: No admin login
    ... It has Windows server 2008 on it, ... different machine with your RDP session than the one you think? ... The account I'm using is the built in administrator account. ... it's membership and it is a member of the right groups, (administrators, ...
    (microsoft.public.windows.server.general)
  • Re: Cant change "Access this computer from the Network" Group Pol
    ... Double-Click Access this Computer from the Network ... Server using the Administrator Account. ... On a server that has that behavior, ... Microsoft MVP - Windows Server - Group Policy. ...
    (microsoft.public.windows.group_policy)
  • Re: Publishing Windows Server 2003 Certificates in Win2k Active Directory
    ... The administrator account is special in that the CA cannot write to the ... > I've installed an Enterprise CA on a Windows Server 2003 (RTM, ... > The CA computer account is a member of the "Cert Publishers" group. ... > Certificate Services could not publish a Certificate for request 10 to the ...
    (microsoft.public.win2000.security)
  • Re: should i have to rename administrator on domain server.
    ... server 2000 Group policy for windows xp ... Can I rename the administrator account on the local ...
    (microsoft.public.security)
  • Cannot access Event Logs, Access Denied
    ... Make sure the Administrator account you are using is not ... a member of the builtin\guest group on the server. ... account is member of that group or a member of any other ...
    (microsoft.public.windows.server.general)