Re: Cannot edit "Log on as a service" and "Allow log on locally" policies on W2K3 server.

SBS Rocker wrote:
OK first off this is a repost of my issues. My apologies. I didn't get the answers I needed so I'm trying again. Thanks to those who offered their input. Here's my environment and what I'm trying to do here. Seems simple yet I cannot figure out why I can no longer do this.

Windows SBS 2003 Server/Premium SP1/ISA 2004 SP2/MS Exchange 2003 SP2/Dual NIC
Windows 2003 Server Standard SP1


I am installing a new version of a program on my W2K3 SP1 server and one of the requirements is to create a "local" user account and grant this account the right to "Log on as a service" on the local machine. However when I go into the Local Security Policy editor/Security settings/Local Policies/User Rights Assignment, I do not get the option to add or edit. It is greyed out. Funny thing is this policy and the "Allow log on locally" policy are the only two I cannot make a change to. These two policies both have different icons showing so I'm not sure what that indicates but am sure it has to do with why I cannot make any changes there. Now I'm also sure at some point and time I ws able to edit these policies according to the accounts that are there now. So what happened and does anyone have a good reason why or better yet how I can edit these policies? I have tried both ways using a domain admin account as well as the local admin account. Any ideas?


The 'different' icons that you see are probably signifying that the settings are being inherited from a Group Policy.

Run RSOP.msc on the server, drill down to those settings and it'll tell you which policy is applying to those settings.


--
Chris M.

Remove pants to email me.
.

Relevant Pages

  • Re: Registry tatooing
    ... I'm working on a utility that will clean up GP policies and preferences. ... Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool at http://www.sdmsoftware.com/products.php ... Administrative policies work very similar to NT4 System Policies. ... Well, to his disliking, the settings remained. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local GPO refreshes outside of refresh interval
    ... I looked through my GPO's Windows Settings section ... > Some policies, including IE policies, have a checkbox that defines if this ... > it should apply EVEN if the value defined in GPO did not change since the ... we are talking about one particular policy: ...
    (microsoft.public.windows.group_policy)
  • Re: Registry tatooing
    ... It can list and clean true policies, ... Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool at http://www.sdmsoftware.com/products.php ... Well, to his disliking, the settings remained. ...
    (microsoft.public.windows.server.active_directory)
  • Re: New Password Policy Implementation Problem
    ... Default Domain Group Policy object. ... > able to implement the following settings via the Default Domain ... > Enforce Password History ... > These policies were enforced for all domain users and we verified the ...
    (microsoft.public.win2000.group_policy)
  • Re: New Password Policy Implementation Problem
    ... Default Domain Group Policy object. ... > able to implement the following settings via the Default Domain ... > Enforce Password History ... > These policies were enforced for all domain users and we verified the ...
    (microsoft.public.windows.group_policy)