RE: Local Security Policy

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Bob Qin [MSFT] (bobqin_at_online.microsoft.com)
Date: 06/16/04 

Date: Wed, 16 Jun 2004 08:29:25 GMT

Hi Bob,

Thanks for your posting here.

You can run secpol.msc to open Local Security Policy on Windows 2003 DC.
But you may found that you cannot add users to some right settings via the
local security policy on a DC. The ADD button is greyed out.

This is by design. This was done to eliminate confusion about which rights
are coming from above (and therefore not editable) and which rights are
availble for editing. The grayed out rights are being applied from a Domain
Security policy or Domain Controller Security Policy.

In Windows 2003 DC, user rights are generally defined in the default domain
controller policy.

Have a nice day!

Regards,
Bob Qin
Product Support Services
Microsoft Corporation

Get Secure! - www.microsoft.com/security

====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Relevant Pages

  • Re: Copying local policy on other computers
    ... Microsoft Windows XP with Service Pack 1 or Windows XP with Service ... the local security policy settings in the local security policy database ...
    (microsoft.public.windowsxp.security_admin)
  • Need help setting permissions in limited account
    ... Windows XP Home doesn't have a Local ... upgrade to use Local security policy. ... >Local security policy is about the best way. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Users no longer authenticate on W2k-svr
    ... the user rights setting in the Local ... Security Policy did it. ... establishing the connection from the RAS server, ... >auditing of logon events on that server and then view the ...
    (microsoft.public.win2000.networking)
  • Re: Restrict login to 1 account
    ... security policy/security settings/local policies/user rights. ... security policy setting, however any settings in domain security policy user ... > I would like to restrict login to only 1 account. ...
    (microsoft.public.win2000.security)
  • local policy
    ... Just recently for some unknown reason my local security policy on a Windows ... 2000 server acting as a stand alone server on a Windows NT domain changed. ...
    (microsoft.public.win2000.security)