SMB and Active Directory logon credentials problem

From: TPetkus (TPetkus_at_discussions.microsoft.com)
Date: 03/16/05 

Date: Wed, 16 Mar 2005 10:01:07 -0800

We have a Canon scanner/copier/facsimile/printer (iR3300). MS has confirmed
a problem with logon credentials when Active Directory is present (detailed
in article 811497). This device is one of those affected. When scanning or
receiving facsimiles, it is not possible for the machine to write them to a
network drive due to this problem. Canon's suggested workaround is to modify
the local security options policy (using gpedit). I drilled down to the
Computer Configuration\Windows Settings\Security Settings\Local
Policies\Securituy Options folder. The entry 'Microsoft network
server:Digitally sign communications (always)' was enabled. Canon's
instructions were to disable it. It was not possible to change it, however -
it was greyed out. I then noticed a 'lock' symbol on all folders in the
hierarchy from Security Settings on down.

I did some research and thought that perhaps group policies for domains was
controlling this and making the local policy unchangeable. I went to the
domain policy editor and found that this value was 'not configured' for the
domain. I configured it as disabled and the used gpupdate /force to
propagate it. I went back and found that there was no change - security
settings were still locked and the digital signing was enable (in contrast to
the domain policy which states it is disabled). I am now confused and could
use some guidance.

In short, how do I 'unlock' the security settings so that I can modify them
in the local group policy object editor so the Canon can write directly to
the server? Also, did I set the domain policy correctly and if so, why would
local policy not conform?

Thank you.

Tom Petkus

Relevant Pages

  • Re: SMB and Active Directory logon credentials problem
    ... > folders in the hierarchy from Security Settings on down. ... > was controlling this and making the local policy unchangeable. ... > was enable (in contrast to the domain policy which states it is ...
    (microsoft.public.windows.server.sbs)
  • Re: Viewing local security policies settings on Windows Server 2003 when domain policies are applied
    ... local policy which is override by domain policy in win2k3 server. ... View local policy on win2k3 server which is override by domain policy ... Domain policy has configured user rights assignments "access this computer ...
    (microsoft.public.windows.group_policy)
  • shutdown without logon not possible anymore ?
    ... Since the domain policy "replace" the local policy thatīs ... block inherit permission from parent object. ...
    (microsoft.public.win2000.security)
  • Re: LGPO vs. Domain GPO
    ... Are you running SP2 on these machines? ... MS-MVP-Windows Server--Group Policy ... > do not havve this local policy as I mentioned before. ... >>> domain policy changes server anme and location. ...
    (microsoft.public.windows.group_policy)
  • Re: GROUP POLICY
    ... What exactly do you mean with "the policy file only appear in the primary DC"? ... domain policy are applied, that's by design. ... GPO: Default Domain Policy ... Computer Setting: 3 ...
    (microsoft.public.windows.server.active_directory)