restore local security policy in win2003

G

Guest

Guest
Archived from groups: microsoft.public.win2000.group_policy (More info?)

I log in as admistrator and try to open local security policy editor but
receive "access denied" error therefore I can't edit the policy. how can I
restore the security to the state after fresh installation? my 2003 server is
not part of domain
Thanks for all the help!

T.
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.group_policy (More info?)

Make sure you are logged on as a member of the administrators group by using
the " net user username " command to view group membership for a username
or use " net localgroup administrators " to view membership of the local
administrators group. The other thing to verifiy is that administrators have
full control to \windows folder and subfolders. Look in Event Viewer to see
if there are any errors/warnings that may indicate what the problem is. See
the link below if nothing seems to work. It works on XP and W2K and should
on Windows 2003. You could use the secedit command as described and append
"areas /user_rights" to the end to restore only user rights. --- Steve


http://support.microsoft.com/default.aspx?scid=kb;EN-US;313222

"Tien Tran" <TienTran@discussions.microsoft.com> wrote in message
news:9966E132-2D1F-4414-97DD-14B57FF6DD5B@microsoft.com...
> I log in as admistrator and try to open local security policy editor but
> receive "access denied" error therefore I can't edit the policy. how can I
> restore the security to the state after fresh installation? my 2003 server
is
> not part of domain
> Thanks for all the help!
>
> T.
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.group_policy (More info?)

i have checked all rights for administrator, and still not working right ....
This started to happen when I remove AD on this machine ....
thanks for all the help !!!!!


"Steven L Umbach" wrote:

> Make sure you are logged on as a member of the administrators group by using
> the " net user username " command to view group membership for a username
> or use " net localgroup administrators " to view membership of the local
> administrators group. The other thing to verifiy is that administrators have
> full control to \windows folder and subfolders. Look in Event Viewer to see
> if there are any errors/warnings that may indicate what the problem is. See
> the link below if nothing seems to work. It works on XP and W2K and should
> on Windows 2003. You could use the secedit command as described and append
> "areas /user_rights" to the end to restore only user rights. --- Steve
>
>
> http://support.microsoft.com/default.aspx?scid=kb;EN-US;313222
>
> "Tien Tran" <TienTran@discussions.microsoft.com> wrote in message
> news:9966E132-2D1F-4414-97DD-14B57FF6DD5B@microsoft.com...
> > I log in as admistrator and try to open local security policy editor but
> > receive "access denied" error therefore I can't edit the policy. how can I
> > restore the security to the state after fresh installation? my 2003 server
> is
> > not part of domain
> > Thanks for all the help!
> >
> > T.
>
>
>
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.group_policy (More info?)

Try logging on as the built in administrator for that server account to see if that
helps. Check the local administrators group to see if the domain admins group for the
domain is a member. If it is not you should be able to add it back while logged on as
the local administrator. If the local administrator can not edit Local Security
Policy, then maybe it is corrupt though access denied is usually a permission problem
which running KB 313222 could fix. See the link below for how to rebuild a corrupt
secedit.sdb and look in Event Viewer to see if any pertinent errors are
reported.. --- Steve

http://www.jsiinc.com/SUBG/TIP3200/rh3252.htm

"Tien Tran" <TienTran@discussions.microsoft.com> wrote in message
news:BEB28B66-585C-4131-89F4-319F3AF3EE60@microsoft.com...
>i have checked all rights for administrator, and still not working right ....
> This started to happen when I remove AD on this machine ....
> thanks for all the help !!!!!
>
>
> "Steven L Umbach" wrote:
>
>> Make sure you are logged on as a member of the administrators group by using
>> the " net user username " command to view group membership for a username
>> or use " net localgroup administrators " to view membership of the local
>> administrators group. The other thing to verifiy is that administrators have
>> full control to \windows folder and subfolders. Look in Event Viewer to see
>> if there are any errors/warnings that may indicate what the problem is. See
>> the link below if nothing seems to work. It works on XP and W2K and should
>> on Windows 2003. You could use the secedit command as described and append
>> "areas /user_rights" to the end to restore only user rights. --- Steve
>>
>>
>> http://support.microsoft.com/default.aspx?scid=kb;EN-US;313222
>>
>> "Tien Tran" <TienTran@discussions.microsoft.com> wrote in message
>> news:9966E132-2D1F-4414-97DD-14B57FF6DD5B@microsoft.com...
>> > I log in as admistrator and try to open local security policy editor but
>> > receive "access denied" error therefore I can't edit the policy. how can I
>> > restore the security to the state after fresh installation? my 2003 server
>> is
>> > not part of domain
>> > Thanks for all the help!
>> >
>> > T.
>>
>>
>>