Re: lockdown desktop without Group Policy

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

First of all: a DC is *not* a standalone server!
A standalone server (i.e. a server in a workgroup) is only
subjected to it's local policy, nothing else. A DC is subject to
Group Policies in the domain.

Can you check who is the current owner of gpt.ini? Right-click
gpt.ini - properties - scecurity - advanced - owner.
And what exactly is listed in the security tab? Any accounts at all
there? With which permissions?
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?VG9ua3k=?= <Tonky@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote on 26
okt 2007 in microsoft.public.windows.terminal_services:

Dear Vera

I have a similar issue, but on a Server 2003 R2 SP1 box which is
a DC and so I followed the instructions for GP Editor as
suggested by TP. All seemed to go well until accessing the
desktop shortcut created in the last step. A Command prompt
appears requesting the gpedit password. When I attempt to type
it in, nothing appears but the Command Line disappears launching
Group Policy Editor saying access denied.

Something obviously went wrong, which could stem back to editing
the security settings for gpt.ini, which suggested changes
couldn't be made as it was read only, but it appeared to make
changes all the same as all existing security groups were
removed from the list.

I can now no longer edit group policy.

Any help?

Many thanks.

Tony
.

Relevant Pages

  • Re: Intermittant GPO failure to apply
    ... If you have backup your group policy before, you can restore it from the ... 244474 How to force Kerberos to use TCP instead of UDP in Windows Server ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • RE: Loopback Policy Not Taking Effect
    ... I setup a fax server that is running WinXP. ... Group Policy was applied from: ... Filtering: Not Applied ...
    (microsoft.public.windows.terminal_services)
  • RE: Companyweb and guests - advice?
    ... You can find the Default Domain policy under the following node: ... Open server management console, locate Advanced Management -> Group Policy ...
    (microsoft.public.windows.server.sbs)
  • Re: Slow Logon related to groups - Update!
    ... Sent update to server: 192.1.1.1 ... Group Policy processing aborted. ... Filtering: Denied ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS DCOM
    ... The doamin policies cahnged, but the local policies of the ... steps to reset the group policy objects to default, ... there are only 9 default group policies on the SBS server. ... Small Business Server Auditing Policy ...
    (microsoft.public.windows.server.sbs)