restore local security policy in win2003

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I log in as admistrator and try to open local security policy editor but
receive "access denied" error therefore I can't edit the policy. how can I
restore the security to the state after fresh installation? my 2003 server is
not part of domain
Thanks for all the help!

T.
 
Make sure you are logged on as a member of the administrators group by using
the " net user username " command to view group membership for a username
or use " net localgroup administrators " to view membership of the local
administrators group. The other thing to verifiy is that administrators have
full control to \windows folder and subfolders. Look in Event Viewer to see
if there are any errors/warnings that may indicate what the problem is. See
the link below if nothing seems to work. It works on XP and W2K and should
on Windows 2003. You could use the secedit command as described and append
"areas /user_rights" to the end to restore only user rights. --- Steve


http://support.microsoft.com/default.aspx?scid=kb;EN-US;313222
 
i have checked all rights for administrator, and still not working right ....
This started to happen when I remove AD on this machine ....
thanks for all the help !!!!!
 
Try logging on as the built in administrator for that server account to see if that
helps. Check the local administrators group to see if the domain admins group for the
domain is a member. If it is not you should be able to add it back while logged on as
the local administrator. If the local administrator can not edit Local Security
Policy, then maybe it is corrupt though access denied is usually a permission problem
which running KB 313222 could fix. See the link below for how to rebuild a corrupt
secedit.sdb and look in Event Viewer to see if any pertinent errors are
reported.. --- Steve

http://www.jsiinc.com/SUBG/TIP3200/rh3252.htm
 
Back
Top