Archived from groups: microsoft.public.win2000.group_policy (
More info?)
Try logging on as the built in administrator for that server account to see if that
helps. Check the local administrators group to see if the domain admins group for the
domain is a member. If it is not you should be able to add it back while logged on as
the local administrator. If the local administrator can not edit Local Security
Policy, then maybe it is corrupt though access denied is usually a permission problem
which running KB 313222 could fix. See the link below for how to rebuild a corrupt
secedit.sdb and look in Event Viewer to see if any pertinent errors are
reported.. --- Steve
http://www.jsiinc.com/SUBG/TIP3200/rh3252.htm
"Tien Tran" <TienTran@discussions.microsoft.com> wrote in message
news:BEB28B66-585C-4131-89F4-319F3AF3EE60@microsoft.com...
>i have checked all rights for administrator, and still not working right ....
> This started to happen when I remove AD on this machine ....
> thanks for all the help !!!!!
>
>
> "Steven L Umbach" wrote:
>
>> Make sure you are logged on as a member of the administrators group by using
>> the " net user username " command to view group membership for a username
>> or use " net localgroup administrators " to view membership of the local
>> administrators group. The other thing to verifiy is that administrators have
>> full control to \windows folder and subfolders. Look in Event Viewer to see
>> if there are any errors/warnings that may indicate what the problem is. See
>> the link below if nothing seems to work. It works on XP and W2K and should
>> on Windows 2003. You could use the secedit command as described and append
>> "areas /user_rights" to the end to restore only user rights. --- Steve
>>
>>
>>
http://support.microsoft.com/default.aspx?scid=kb;EN-US;313222
>>
>> "Tien Tran" <TienTran@discussions.microsoft.com> wrote in message
>> news:9966E132-2D1F-4414-97DD-14B57FF6DD5B@microsoft.com...
>> > I log in as admistrator and try to open local security policy editor but
>> > receive "access denied" error therefore I can't edit the policy. how can I
>> > restore the security to the state after fresh installation? my 2003 server
>> is
>> > not part of domain
>> > Thanks for all the help!
>> >
>> > T.
>>
>>
>>