binary_1001010
asked on
Need help with gpedit.msc
Refer to my screenshot :
http://ninelives.clubsnap.org/win/policy.JPG
What does the lock mean? I already login as a administrator. This server is a DC.
Thanks.
http://ninelives.clubsnap.org/win/policy.JPG
What does the lock mean? I already login as a administrator. This server is a DC.
Thanks.
ASKER
but i can't change the setting inside, I already logon as administrator.
Now I see that you are looking at the policy from your local computer. What's happening is that you are receiving policy setting from the domain that are applying to your local PC. You will not be able to change the policy settings that have the icon that looks like two servers with a script in the middle. You should be able to change the policies with blue icon though.
ASKER
My Domain span across eight-sites. We have 13 domain controllers.
I ran "DOMAIN CONTROLLER Security Policy" on one of the server(let's call it TSH-DC), what I added was
a) Allow log on locally
b)Allow log on throught terminal services.
Then I ran gpupdate /force.
Next, I entered gpedit.msc on TSH-DC(as seen in screenshot), the changes wasn't reflected.
But, I check all other DCs in other sites, the changes were reflected.
Strange if you ask me, the DC that I made changes on wasn't affected, but other sites were affected.
Any comments?
Thanks in advance.
I ran "DOMAIN CONTROLLER Security Policy" on one of the server(let's call it TSH-DC), what I added was
a) Allow log on locally
b)Allow log on throught terminal services.
Then I ran gpupdate /force.
Next, I entered gpedit.msc on TSH-DC(as seen in screenshot), the changes wasn't reflected.
But, I check all other DCs in other sites, the changes were reflected.
Strange if you ask me, the DC that I made changes on wasn't affected, but other sites were affected.
Any comments?
Thanks in advance.
That is strange. If the TSH-DC is in the same OU as the others, the change should take effect. Have you tried logging on through TS for that particular DC. Maybe it's working but not listed for some reason. I would also give it a little time. But, really, once you did the gpupdate, it should apply.
ASKER
I tried logon throught TS, the error is Insufficient right to logon interactively. It mean the policy wasnt reflected.....
:-(
:-(
ASKER
i solved my own problem, i need to access GPO management(install from microsoft), check the ou for inherited policy.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
The folder icon that has a lock on it just tells you that the policies contained within them are security related policies. You are not being restricted in any way from seeing certain policies.
Thanks,
cfairley