Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss
Group Policy Object Editor
1 view
Skip to first unread message
Frank C
Jun 1, 2004, 4:08:12 PM6/1/04
to
Hello,
I'm trying to modify my local computer policy on 2003 SBS server. I run the
gpedit.msc and navigate to the Computer config, Windows settings, Security
settings, etc. I can see the items I want to change. However, they are all
greyed out. There is a little lock next to each item starting with Security
settings and I can't change any settings.
How do I remove the lock and make the changes? I am logged in as
administrator, and I have every permission I can think of. (Enterprise
admin-full, domain admin-full, etc.)
Help!
Thanks
Frank
I'm trying to modify my local computer policy on 2003 SBS server. I run the
gpedit.msc and navigate to the Computer config, Windows settings, Security
settings, etc. I can see the items I want to change. However, they are all
greyed out. There is a little lock next to each item starting with Security
settings and I can't change any settings.
How do I remove the lock and make the changes? I am logged in as
administrator, and I have every permission I can think of. (Enterprise
admin-full, domain admin-full, etc.)
Help!
Thanks
Frank
Marin Marinov
Jun 1, 2004, 6:16:38 PM6/1/04
to
<snip>
Hi Frank,
What you are observing is expected behaviour - these are settings
overriden by a domain-based GPO. Your server is a DC and you shouldn't
tamper with local security policy on DCs. If you want to configure a
specific setting for this machine (and all DCs if you have added more)
edit the Default Domain Policy. Open Active Directory Users and
Computers, right-click the Domain Controllers OU, go to the Group Policy
tab and 'Edit...' the GPO.
Hi Frank,
What you are observing is expected behaviour - these are settings
overriden by a domain-based GPO. Your server is a DC and you shouldn't
tamper with local security policy on DCs. If you want to configure a
specific setting for this machine (and all DCs if you have added more)
edit the Default Domain Policy. Open Active Directory Users and
Computers, right-click the Domain Controllers OU, go to the Group Policy
tab and 'Edit...' the GPO.
HTH
--
Cheers,
Marin Marinov
MCT, MCSE 2003/2000/NT4.0,
MCSE:Security 2003/2000, MCP+I
-
This posting is provided "AS IS" with no warranties, and confers no
rights.
0 new messages