Improve company productivity with a Business Account.Sign Up

x
?
Solved

Local Security Policy: Unable to add a user

Posted on 2004-07-31
6
Medium Priority
?
406 Views
Last Modified: 2010-04-19
My Problem:
The problem is with the Local Security Policy. I am unable to add a user to "Act as part of the operating system" and "Log on as service" but I have added users to "Back up files and directories".

Symptoms:
The "Add Users or Group" button is disabled on "Act as part of the operating system" and "Log on as service".
These to policies have a different icon next to them. 2 computers with a piece of paper in-between them.

Other:
I am an admin on the box.

Any suggestions would be appreciated!

Thanks,
   Marc
0
Comment
Question by:MarcGraff
  • 2
  • 2
4 Comments
 
LVL 34

Expert Comment

by:Dave_Dietz
ID: 11686861
The icon you describe means the policy has been set at a higher level (OU, Site and/or Domain) and you are inheriting the setting.  The fact that you can't add a user would indicate that it has been added with a no-override option.

Try running GPResult at a command line to see which policies are being applied to your machine.  You will have to either change or remove the definition of that policy in order to change it via Local policy.

Dave Dietz
0
 
LVL 1

Author Comment

by:MarcGraff
ID: 11687603
Applied Group Policy Objects:
- My DS Policy
- Default Domain Member Servers Policy
- Default Domain Policy
- Local Group Policy


How would I remove the definition of a policy?

I am not an admin on the box the policies are applied from.

Thanks,
   - Marc
0
 
LVL 34

Accepted Solution

by:
Dave_Dietz earned 2000 total points
ID: 11688771
You either have to have Administrative rights to the policy delegated to you, admin rights for the OU or domain administrative rights.

Sounds like in your case you will need to talk to your system admins to get the policy changed.

There is no way to disable the policy from your local machine.

Dave Dietz

0
 
LVL 1

Author Comment

by:MarcGraff
ID: 11690031
Darn! Thanks anyway.

   - Marc
0

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Through the video, you can check the migration process of Outlook PST file to PDF. Kernel for Outlook to PDF tool can convert Outlook emails with all attributes like Subject, To, From, Cc, Bcc and other folders such as Inbox, Outbox, Sent Items, Jun…
Watch the video to know the simple way to remove or recover or reset lost or forgotten passwords of Outlook PST file. With Kernel Outlook Password Recovery tool such operation is very easy to perform. It is a freeware with limitation to use with 500…

595 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question