Local Security Policy Being Changed?

[Danny]

Several XP machines on our network are having their Local
Security Policies changed that is ultimately preventing
other machines from administering them remotely.

We are not currently using Active Directory (still an NT4
backbone) so there are no Domain Policies in place that
could be overwriting the local policies.

Moreover when I change the local policy back to the
default settings a reboot of the unit simply removes the
changes I make and access over the network to the affected
unit is once again prevented.

Is there an update that has been released that is making
this change intentionally?

Is there a virus that is maliciously changing this setting?

Has anyone else experienced it and resolved it?

Any help or suggestions greatly appreciated.

Regards,

Danny

 

[Danny]

I have continued to investigate this with little success.

I cannot beleive no-one has experienced this?

I have used the security analysis and configuration snap-
in to configure and analyze the computer using the default
setup template settings. This reolves the problem for a
couple of minutes and then the "policy" is refreshed and
my changes are removed again. All users are removed from
the top line, "access this computer from the network"???

Any suggestions?? Anyone????