In windows 2003 server help search for "leagal text"
On the taskbar, click Start, point to Run, type mmc, and then click OK.
In the console, on the File menu, click Add/Remove snap-in.
In Add/Remove Snap-in, click Add, and then, in Add Standalone Snap-in,
double-click Group Policy Object Editor.
In Select Group Policy Object, click Browse, browse to the policy object you
would like to modify, and then click Finish.
Click Close, and then click OK.
In the console tree, click Security Settings.
Where?
GroupPolicyObject [ComputerName] Policy
Computer Configuration
Windows Settings
Security Settings
Do one of the following:
To edit Password Policy, Account Lockout Policy, or Kerberos Policy, in the
details pane, double-click Account Policies.
To edit Audit Policy, User Rights Assignment, or Security Options, in the
details pane, double-click Local Policies.
To edit event log settings, on the console tree, click Event Log.
In the details pane, double-click the security setting that you want to
modify.
(Optional) If this security setting has not yet been defined, select the
Define these policy settings check box.
Modify the security setting and then click OK.
Note
To perform this procedure, you must be a member of the Domain Admins group
or the Enterprise Admins group in Active Directory, or you must have been
delegated the appropriate authority. As a security best practice, consider
using Run as to perform this procedure.