Re: SMB and Active Directory logon credentials problem

From: Eriq Neale (eon_at_eonconsulting.idonotwantspam.net)
Date: 03/18/05 

Date: Fri, 18 Mar 2005 13:33:43 GMT

Hey Tom.

I'd recommend creating a separate GPO to handle this. Check out
instructions at:
http://simultaneouspancakes.com/Lessons/archives/2004/12/how_to_disable.shtml

HTH...

-Eriq

> We have a Canon scanner/copier/facsimile/printer (iR3300). MS has
> confirmed a problem with logon credentials when Active Directory is
> present (detailed in article 811497). This device is one of those
> affected. When scanning or receiving facsimiles, it is not possible
> for the machine to write them to a network drive due to this problem.
> Canon's suggested workaround is to modify the local security options
> policy (using gpedit). I drilled down to the Computer
> Configuration\Windows Settings\Security Settings\Local
> Policies\Securituy Options folder. The entry 'Microsoft network
> server:Digitally sign communications (always)' was enabled. Canon's
> instructions were to disable it. It was not possible to change it,
> however - it was greyed out. I then noticed a 'lock' symbol on all
> folders in the hierarchy from Security Settings on down.
> I did some research and thought that perhaps group policies for domains
> was controlling this and making the local policy unchangeable. I went
> to the domain policy editor and found that this value was 'not
> configured' for the domain. I configured it as disabled and the used
> gpupdate /force to propagate it. I went back and found that there was
> no change - security settings were still locked and the digital signing
> was enable (in contrast to the domain policy which states it is
> disabled). I am now confused and could use some guidance.
>
> In short, how do I 'unlock' the security settings so that I can modify
> them in the local group policy object editor so the Canon can write
> directly to the server? Also, did I set the domain policy correctly
> and if so, why would local policy not conform?
>
> Thank you.
>
> Tom Petkus 

-- 
Eriq Neale - MCSE, MCSA Messaging, MCP Small/Medium Business, Mac Guru
EON Consulting - www.eonconsulting.net
Need additional IT insight? E-mail "support at eonconsulting dot net"

Relevant Pages

  • SMB and Active Directory logon credentials problem
    ... controlling this and making the local policy unchangeable. ... the domain policy which states it is disabled). ... how do I 'unlock' the security settings so that I can modify them ...
    (microsoft.public.windows.server.sbs)
  • Re: Viewing local security policies settings on Windows Server 2003 when domain policies are applied
    ... local policy which is override by domain policy in win2k3 server. ... View local policy on win2k3 server which is override by domain policy ... Domain policy has configured user rights assignments "access this computer ...
    (microsoft.public.windows.group_policy)
  • shutdown without logon not possible anymore ?
    ... Since the domain policy "replace" the local policy thatīs ... block inherit permission from parent object. ...
    (microsoft.public.win2000.security)
  • Re: LGPO vs. Domain GPO
    ... Are you running SP2 on these machines? ... MS-MVP-Windows Server--Group Policy ... > do not havve this local policy as I mentioned before. ... >>> domain policy changes server anme and location. ...
    (microsoft.public.windows.group_policy)
  • Re: GROUP POLICY
    ... What exactly do you mean with "the policy file only appear in the primary DC"? ... domain policy are applied, that's by design. ... GPO: Default Domain Policy ... Computer Setting: 3 ...
    (microsoft.public.windows.server.active_directory)