Local Security Policy Settings

[Guest]

When I open up Local Security Policy mmc and go to make changes in password policy or any other settings. The options to change are greyed out.. I am unable to make any changes. I am logged on as the the local account administrator and I am connected to a domain controller on my laptop for the courses I am taking. I have installed XP Pro on another hard drive within the system just to see if I have the same trouble .... and yes the options are greyed out on that install also.

I have run the command line to restore the default settings and that has not helped.

Thanks for your help.

 

[Roger Abell]

This is what one sees when a policy setting has been
applied from the Active Directory level

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA

When I open up Local Security Policy mmc and go to make changes in

password policy or any other settings. The options to change are greyed
out.. I am unable to make any changes. I am logged on as the the local
account administrator and I am connected to a domain controller on my laptop
for the courses I am taking. I have installed XP Pro on another hard drive
within the system just to see if I have the same trouble .... and yes the
options are greyed out on that install also.

 

[Iain Mulholland [MSFT]]

A domain Controller has no concept of a Local Security Policy. It gets all
of its security settings from the default domain group policy - check
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/gp/615.asp

thx
iain

 

[Guest]

I don't quite understand the replies... how would I correct this problem. My apologies but I am in quite a learning curve.

Thanks for the help.

 

[Guest]

As soon as I removed the machine from the domain I was able to make changes in policy, the options are not greyed out now. Guess the next step is to learn how to correct this

Thanks.

 

[Roger Abell [MVP]]

If you run the domain, then you need to start discovering how GPOs
are used to manage machines within the domain.
If you do not run the domain, then anything that was grayed out (or
might in the future when domain level GPOs get altered) is not within
your control. Domain based settings will always override local settings
(and so they are grayed out).

As soon as I removed the machine from the domain I was able to make

changes in policy, the options are not greyed out now. Guess the next step
is to learn how to correct this.

 

[Guest]

Yes I run the domain ... I have the server setup on my laptop for the online courses I am taking. So I can do what I have to with regards to changes.... I just need the knowledge that is required to do this. I have most of the MCSE Second Edition training kit books including W2K Server. I should be able to find help in the books but a little coaching sure comes in handy also : )

Thanks for the feedback.

 

[Roger Abell [MVP]]

There are some great writeups available on the MS website for almost
every area of domain deployment and administration. Try going to the
older W2k web tree, as it is very mature, and then drill into the IT Pro
portion, the technical library, where you will find How-To, Overview, and
detail articles. Especially look under Management for articles on the
use of GPO (Group Policy).
Good luck,
Roger

Yes I run the domain ... I have the server setup on my laptop for the

online courses I am taking. So I can do what I have to with regards to
changes.... I just need the knowledge that is required to do this. I have
most of the MCSE Second Edition training kit books including W2K Server. I
should be able to find help in the books but a little coaching sure comes in
handy also : )

 

[Guest]

Thanks Roger ... I will get at it then... and yes I will need all the luck I can muster

 

[Guest]

-----Original Message-----
As soon as I removed the machine from the domain I was

able to make changes in policy, the options are not
greyed out now. Guess the next step is to learn how to
correct this.