Link to home
Start Free TrialLog in
Avatar of binary_1001010
binary_1001010Flag for Singapore

asked on

Need help with gpedit.msc

Refer to my screenshot :

http://ninelives.clubsnap.org/win/policy.JPG

What does the lock mean?  I already login as a administrator.  This server is a DC.

Thanks.
Avatar of cfairley
cfairley
Flag of United States of America image

Hello binary 1001010,

The folder icon that has a lock on it just tells you that the policies contained within them are security related policies.  You are not being restricted in any way from seeing certain policies.

Thanks,
cfairley
Avatar of binary_1001010

ASKER

but i can't change the setting inside, I already logon as administrator.
Now I see that you are looking at the policy from your local computer.  What's happening is that you are receiving policy setting from the domain that are applying to your local PC.  You will not be able to change the policy settings that have the icon that looks like two servers with a script in the middle.  You should be able to change the policies with blue icon though.
My Domain span across eight-sites. We have 13 domain controllers.  

I ran "DOMAIN CONTROLLER Security Policy" on one of the server(let's call it TSH-DC), what I added was

a) Allow log on locally
b)Allow log on throught terminal services.

Then I ran gpupdate /force.

Next, I entered gpedit.msc on TSH-DC(as seen in screenshot), the changes wasn't reflected.

But, I check all other DCs in other sites, the changes were reflected.  

Strange if you ask me, the DC that I made changes on wasn't affected, but other sites were affected.

Any comments?

Thanks in advance.
That is strange.  If the TSH-DC is in the same OU as the others, the change should take effect.  Have you tried logging on through TS for that particular DC.  Maybe it's working but not listed for some reason.  I would also give it a little time.  But, really, once you did the gpupdate, it should apply.
I tried logon throught TS, the error is Insufficient right to logon interactively.  It mean the policy wasnt reflected.....
:-(
i solved my own problem, i need to access GPO management(install from microsoft), check the ou for inherited policy.
ASKER CERTIFIED SOLUTION
Avatar of ee_ai_construct
ee_ai_construct
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial