What would prevent a local administrator to change the local policies?

The problem occurred on a workstation XP (svc pk 3) within a W2K3 domain. It is the only station working (103 others) which I can't distance in via mstsc since my post (also under XP svc pk 3). I went (work to) the workstation and connected as a local administrator, and then have pulled-up gpedit so that I could change the local user rights policy for "Refusal to logon via the Terminal Services" to remove the Everyone group. But the two buttons are grayed (add user or group, and delete). After reviewing several other local policy settings, I found that they also had their gray button. I then tried the same thing connected as a domain administrator. No joy. The same problem. I couldn't change the local policy settings through my domain administrator account or the local administrator account. So I checked the default domain and all policy policies assigned to the ORGANIZATIONAL unit in which resides the problem workstation account. All of these policies had the "Deny logon via the Terminal Server Services of' value 'undefined '.  Is it possible that one of our administrators changed the permissions on a registry key where the policy settings so that only he could change local policy on this box? Or is there another explanation?

I found the solution. I had to give administrators complete control over HKLM\SECURITY. Once I made this change I could once more change local policy. Now, I need to implement a method to push this change for all our workstations...

ICACLS?

Tags: Windows

Similar Questions

  • What would prevent the AS3 to work in another exemplary work...

    Flash CS5.5? I upgraded from Flash 8 to CS5.5 recently. I used Flash strictly for entertainment until recently so have not really tinkered with AS3 at all. I tried a few tutorials and got '1120-errors of unrecognized property' and assume that there is something wrong with my code or my settings. After uninstalling, reinstalling, fitness and try several examples of files that I found online, it is clear that the just AS3 function is not compatible with my computer. Animation functions work perfectly, but I can't get the debugger to connect and HAVE # refuses to acknowledge all instances on the stage (and, Yes, I triple checked the publication settings are set to do so.) Is this unusual? What would prevent the AS3 to work when everything else is perfect?

    Which would normally result in AS3 to no function is poorly coded in AS3.  A 1120 error may result from certain things, so if you can describe a design simplified something you create which presents the erro and show the encoder, it might be easier to spot if there is a problem with the coding.

  • What version of Adobe allows you to change the page on some pages orientaion and save the document with just a few of the tours pages?

    What version of Adobe allows you to change the orientation of the page on some pages and save the document (PDF) with only a few of the tours pages?

    Adobe is the name of the company, not the software as many people say. Since you want to know the exact software, it is important to know that.

    Any version of Acrobat Standard or Acrobat Pro to do this. These are commercial software (a cool weather or subscription).  The free Adobe Reader or Acrobat Reader cannot do this.

    Tip: there are two ways to turn the pages; alone will save him.

  • What would prevent Thunderbird to recreate the deleted files *.msf?

    Which would prevent TB to re-create *.msf files after they have been deleted, to get the old mail appears in TB (mail still physically in the Mail folder)?

    Had to create a new profile & copy in a bunch of accounts. Everything worked OK except one.

    1, an acct lacked in Tbird. Finally I've recreated the acct, but it captures not all old emails, finding themselves in the new profile under the acct folder (is not yet).

    All other accts work. I deleted for this account *.msf files and rebooted. Still not a pick up old email, but did recover new msgs (arrival after that the new profile has been created).

    Then, when I got the 1 TB re - start, I was sure that all messages were display. A few minutes later, that I would look & they were all gone an Acct - except most recent messages. Huh? I drank a cup of coffee.

    Finally saw that TB was not yet re - create the msf files, so it never keeps messages it displays (I guess - they keep "disappear").

    What 'they' do you mean? *.Msf files? How could they be in a different profile than running?

    "This is what really happened."

    TB has created an e-mail folder 'different' for this acct - which I didn't see at the bottom of all accts under "Profiles\ < profile_name > \Mail."

    I had entered in the name of the POP server of the ACTC in middle of TB. I used "POP.unseen...". "instead ofmail... .unseen. "- which seems unlikely to work. The instructions of the supplier are to be used "mail.unseen...". »
    I'm looking for the other file of mail storage because the name of the server 'pop.unseen... '. "worked. He created of d/l the most recent mail in the new mail store folder, that I don't see. I was expecting it to be like the old folder & as another account of this provider service.

    Once I changed the name of the server in the settings of TB, he used the files recreated the *.msf & file storage 'correct' in this folder. But, I had to open the box received & sent these two folders of mail storage files, and then copy the old posts the most recent mail files.

    If Tbird / invisible servers did not work using server names "mail.unseen...". ' or 'pop.unseen... '. ", I would have immediately taken my"mistake ".

  • What would prevent a laptop to see our WLAN but not others? __

    Hi guys,.

    I have a laptop Vista Ultimate used to easily connect to my wireless LAN, until we recently took the server offline to replace a RAID drive. Now, the server is online, I can't understand why the laptop does not connect to WLAN no more. The real problem is that he doesn't even see our WLAN in the list of wireless networks - but she sees others in the vicinity. Others see and connect to the WLAN. I put the laptop on a table, less than a meter of the WLAN antenna, but would see it yet.

    The WIRELESS network is on the inside of the SBS 2003 R2 domain. Nothing has changed on the laptop - no MS, no configuration changes update, no application does not install, nothing. One day she saw and connected to the WLAN - the other would not. He had run a few days well offline.

    I tried restarting the computer laptop (several times), disabling the WLAN card (several times) and cold start of the WRouter (several times). I'm out of ideas.

    What would this prevent a cell phone to see our WLAN but not others?

    Kind regards, Graham R Seach Sydney, Australia

    Hi guys,.

    I'm really sorry for not answering. I wouldn't give up this thread. I managed to solve the problem by restarting the server several times. I still don't know what caused it or why several reboots solved. But thanks anyway.

  • Administrator to change the homepage affecting unlocked

    I am the system administrator want to know the method to change the homepage locking to be free to the user to change at will. A program downloaded it has locked and I don't know how to change the setting in the back.

    I suspect it is your antivirus program that blocks the change on the home page. Poking around in it looking for options for your home page.

    If you try to change it, do your receive any kind of opinion say you it is not editable? If so, don't notice give you no indication of what program it is?

    Kind regards

  • I want to install Win Xp Pro so that only the administrator can change the settings

    Hey

    I want to set up a Win Xp pc so that only me as an administrator will be able to change all settings and install all the programs. Because the pc users is illiterate and changes the settings in the way n I need to format the pc every 4 months.

    Is there anything we can do about it or not?

    Kind regards

    Hello

    I would recommend that you change the account type to increase or decrease the rights of the user on the computer.

    Follow the steps in this article to do.
    http://support.Microsoft.com/kb/279783

  • I recently bought a 2nd computer hane. Unfortunately I don't have administrator access because I believe that this computer is part of a companys network. How can I get access administrator ot change the access of current users?

    Type administrator access

    Next time put please the details of your question in the body of the message instead of the subject line.

    With a used computer recommended is to do a clean install. This is particularly important with a former domain member machine since several strategies group defined on the server will be "tattooed" on the system and make it very difficult to use as a home machine.

    http://michaelstevenstech.com/cleanxpinstall.html - Clean install - how-to
    http://www.elephantboycomputers.com/page2.html#Reinstalling_Windows

    If you are unable or refuse to do it (not recommended), you will need to use NTpasswd to change the password for the local administrator to white. Then connect and separate the machine from the network. Create a new user account for yourself and remove any domain user profile. This will not remove policy group that are tattooed and m ost companies also set a default restrictive profile so if that was the case in your user accounts new cases will also be limited.

    Download the bootable CD .iso image file, burn with third-party burning software such as free ImgBurn , Nero or Roxio. Burn as an image, not in the form of data. Start with the media that you have created. You need to maybe change the boot order in the BIOS or obtain a menu of boot command temporary with the pressure of a special key. NTpasswd will run. Follow the instructions carefully.

    http://home.eunet.no/pnordahl/ntpasswd/

    MS - MVP - Elephant Boy computers - don't panic!

  • What could cause my computer to rendomly change the drive letter assigned to a mapped network drive?

    I use a Windows XP Pro SP3 System. We have dipped sharing network and one of them began to change the drive letter assigned periodically through the week that makes a problem in access to frequently used files. No reason as to why he would do this?

    Hi KyleMiller,

    ·         How you map the network drive?

    Try to re-mapping the network drive and check if it helps. Follow this link to do this.

    How to connect and disconnect a network drive in Windows XP

  • What type of Essbase restructuring occurs if change the position of sparse dimension in outline

    The wording of the Essbase Administrator's guide is curious me...

    We have a 11.1.2.2 application Planning/Essbase and I want to use the Performance parameters in the planning to go down a dimension of the sparse outline more order.

    Essbase (contour change Quick Reference) Administrator's guide tells me two possible outcomes, but it's not clear to me which apply in my case.

    The first case: ("change the order of the two-dimensional sparse") said Essbase restructures the index.

    The second case: ("change the order of dimensions') said Essbase restructures them data and index

    Hoping that the forum can help me decide which one of them is true - thank you.

    I never noticed the ambiguity of leaflets before, but if you just change the order of the sparse dimensions, it should be the first (an index restructure).

  • Saving PDFs: I would like to be able to change the name of the file and the destination of the downloads without jumping through hoops.

    I download a lot of PDF files and I organize their file name. I want to record on my computer to read later. When I have a PDF document is opened in the browser, it's particularly embarrassing. As it is, I have two options:

    Save the file:
    This automatically sends the file to a temporary folder to download, which Windows will not let me access without memorizing the exact location. It also saves automatically under the default file name, I never keep. If I use this option, I have to go back and manually move the file in my documents and rename it.

    Open the file:
    This opens the file in a new window from Adobe (while simultaneously recording to the same temporary folder). I have to open the file in the browser, and then open it in a new window, then hit save slot, then PDF, then change the destination folder (because the default value is the temp folder) and name of the file.

    Please, give me manual control of downloads! I want just a save as option.

    Is it possible to right click on the download link and use Save Link as...?
    Who will have the choice of "off-site" hands of Adobe.

  • HP Folio 13 has password administrator (cannot change the bios settings)

    Im trying to change the boot order to USB key and it gives me "system disabled 76799886. Is it possible to boot usb or should I scrap it? Help, please

    Hello

    Try to enter: 69691208

    Kind regards

    DP - K

  • Trying to change stamps to take account of what I mean. How can I change the name of a dynamic stamps

    How can I change the name of the dynamic stamp?

    The name of stamp is part of the name of the page template in the file stamp, so to change it, you can open the stamp file and change the name of the template for the stamp in question. Exactly how do you this depends on which version of Acrobat you are using.

    Acrobat 9: Advanced > Document processing > models

    Acrobat 10/11: Tools > Document processing > models

    Acrobat DC: Tools > organize Pages > more > models

  • On a windows 2000 Server computer how to configure Group Policy to prevent my students to always change the desktop background and screen saver? __I want to set a screen saver and corporate logo.

    The server is a standard computer on Windows 2000 server and the workstations are XP.  We will be upgrading our servers next year, but for now I have to use what I have.  I do not know true with Windows 2000 Server Edition.

    You have posted in a forum for issues of office and customization for the Windows XP operating system. Your question has to do with Windows Server and group policy. Here's a great site to help you with your server issues:

    http://www.Petri.co.il

    Questions on group policy can be asked in the TechNet forums or in the Group Policy newsgroup:

    In a News Reader: microsoft.public.windows.group_policy
    On the web: http://www.microsoft.com/communities/newsgroups/list/en-us/default.aspx?dg= microsoft.public.windows.group_policy

    http://social.technet.Microsoft.com/forums/en/categories/ MS - MVP - Elephant Boy computers - don't panic!

  • I tried to solve a problem with the removal of e-mails, but it did not work. What would be my next step to enable the removal of mail?

    I was unable to delete e-mails, so I tried to empty deleted messages, but he has also deleted the folder. I closed thunderbird, found this support and the post about the basket of profile files deletion.
    I re-opened thunderbird to locate records profile and noticed the deleted items folder and the files were returned.
    I closed thunderbird according to the instructions and deleted files from the Recycle Bin in profile files. After thunderbird restarts, the deleted items folder was still there with deleted messages, and I was still unable to delete any other msg or empty the tray without the record also becoming extinct.

    Turns out that my anti-virus was a scheduled scan and that he had found a virus in piece attached in my deleted items folder, so do nothing during the scan.

Maybe you are looking for

  • In Photos 1.5, which is equivalent to shadows.

    I guess that's in settings-->--> Luminance.  Where can I find instructions on the use of the new adjustments more efficiently?

  • Is there a simple list with what can do the 8600 printer?

    Is there a list somewhere with all the features of HP Officejet Pro 8600 explained or mentioned briefly? Stuff like 'you can automatically scan several pages and send it to an e-mail address' and 'you can print with your smartphone with the help of a

  • SCB 68 rigged with potentiometer, have problems...

    [I am preparing a graduate in the laboratory material that I work so much that I apologize in advance if I misuse of terminology, I'm not quite familiar with it] I have a SCB-68 block connected to a computer through a PCI-6289.  I can see the device

  • tune up disadvantages and utilities 2010 pros

    Hi im trying to get my 5 year old PC in top form despite the years she had.so im trying to buy tune up utilities but before doing so I would like to know if it is really optimized and speed up my PC like what is said in their announcement or will it

  • What are the best days and times to send emails to customers?

    I heard and got great results with so many different days and times of the week to sending emails to prospects and customers.  What you find works best for you and what recommendations you have?