Re: Cannot access security settings in Win 2003
From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 01/27/05
- Next message: Jan: "Re: VPN Tray icon not showing"
- Previous message: Steven L Umbach: "Re: Second Trust"
- In reply to: Mikey_N: "Re: Cannot access security settings in Win 2003"
- Next in thread: Mikey_N: "Re: Cannot access security settings in Win 2003"
- Reply: Mikey_N: "Re: Cannot access security settings in Win 2003"
- Reply: Mikey_N: "Re: Cannot access security settings in Win 2003"
- Messages sorted by: [ date ] [ thread ]
Date: Thu, 27 Jan 2005 01:43:01 -0600
I have not experienced any problems with Windows 2003. The change in default
settings was done to increase security substantially though it should not
cause the problems you are experiencing. If you can open AD Users and
Computers select view to check that advanced settings are shown. The go to
the system folder and find the policies subfolder. There are some long
numbers there that are your GPO's and there should be at least two. Check
the properties to make sure domain admins have read, write, create child,
delete child to all of them.
Verify that the domain controller is pointing to itself as it's only
preferred dns server and check dns for the existence of the domain zone and
the _srv records for the domain. Run the support tools netdiag and dcdiag on
the domain controller to see if any problems are found. They are on the
install disk in the support/tools folder where you have to run the setup
there. Verify the existence of the sysvol share. You should be able to see
it and access it in Network Places. Go to \windows\sysvol to make sure
administrators have full control permissions to that folder and the
subfolders and also full control permissions to the sysvol share. There
should not be any deny permissions in those folders. The other thing I would
check is that domain admins is a member of the administrators group. Another
possibility is that you have locked down the server with Group Policy and it
is applying to administrators also. --- Steve
"Mikey_N" <Brooklynbluster@KnuckleNumbers.com> wrote in message
news:u1WX3vCBFHA.1452@TK2MSFTNGP11.phx.gbl...
> What I mean by 'get it straight' is that from my experiences, and from
> what
> I have seen in the newsgroups, they made some bad choices when it came to
> the default settings they use for Win2003 server and they need to fix
> that.
> Of course it is nothing new to find poor judgement in the default settings
> of MS products!
>
>
>
> "Mikey_N" <Brooklynbluster@KnuckleNumbers.com> wrote in message
> news:uCU8wgCBFHA.1260@TK2MSFTNGP12.phx.gbl...
>> Cannot get into Domain Controller Security Policy,
>>
>> > Users and Computers by finding the domain, right click to bring up
>> > properties/Group Policy/properties -security to make sure domain admins
>> have
>> > at least read/write permissions.
>>
>> Cannot get in there either. Have rebooted numerous times. There is
> something
>> amiss here - it also takes a very very long time for the Domain users
>> snap
>> in to come up - like about five minutes. Don't find anything in the event
>> log - I cleared it now and will watch for something now.
>>
>> whatever, thanks. I think I'll probably go back to Win2k server - this
> isn't
>> worth the time meanwhile, it can wait until MS gets it straight.
>>
>>
>>
>> "
>> "Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
>> news:%23%23Y92d$AFHA.1452@TK2MSFTNGP11.phx.gbl...
>> > Can you access Domain Controller Security Policy? Check Event Viewer
>> > for
>> any
>> > pertinent errors and check your permissions to the default domain GPO
>> > in
>> AD
>> > Users and Computers by finding the domain, right click to bring up
>> > properties/Group Policy/properties -security to make sure domain admins
>> have
>> > at least read/write permissions. While there try to use edit to manage
>> > Domain Security Policy which is a subset of the default domain
>> GPO/computer
>> > configuration/Windows settings/security settings. Also try rebooting
>> > the
>> > computer if none of that helps. --- Steve
>> >
>> >
>> > "Mikey_N" <brooklynbluster@knucklenumbers.com> wrote in message
>> > news:OAw2lz%23AFHA.1260@TK2MSFTNGP12.phx.gbl...
>> > >I want to manipulate some of the security settings in Win2003 server
>> (eval
>> > > version) (domain security policty, digital signatures, etc). I am
> logged
>> > > on
>> > > with an account that has admin, domain admin, enterprise admin, group
>> > > policy, etc. etc priveleges but these options are not avaible - they
> are
>> > > greyed out and disabled and when trying to access domain security
> policy
>> I
>> > > get an error messages 'access denied.." I had been logging on through
>> > > remote
>> > > desktop and thought that perhaps that was the reason but then I
>> > > logged
>> on
>> > > directly to the physical console with same results. The server is
> Domain
>> > > Controller and also DNS and DHCP server.
>> > >
>> > > What is wrong? How do I access these settings??
>> > >
>> > > --
>> > >
>> > > Feel free to contact me with any questions or concerns.
>> > > ________________________________________
>> > >
>> > > MN @ Hzn
>> > > 212-480-7000 x17
>> > >
>> > >
>> >
>> >
>>
>>
>
>
- Next message: Jan: "Re: VPN Tray icon not showing"
- Previous message: Steven L Umbach: "Re: Second Trust"
- In reply to: Mikey_N: "Re: Cannot access security settings in Win 2003"
- Next in thread: Mikey_N: "Re: Cannot access security settings in Win 2003"
- Reply: Mikey_N: "Re: Cannot access security settings in Win 2003"
- Reply: Mikey_N: "Re: Cannot access security settings in Win 2003"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
