?
Solved

Need help with gpedit.msc

Posted on 2004-11-15
9
Medium Priority
?
332 Views
Last Modified: 2012-05-05
Refer to my screenshot :

http://ninelives.clubsnap.org/win/policy.JPG

What does the lock mean?  I already login as a administrator.  This server is a DC.

Thanks.
0
Comment
Question by:binary_1001010
  • 4
  • 3
8 Comments
 
LVL 11

Expert Comment

by:cfairley
ID: 12592321
Hello binary 1001010,

The folder icon that has a lock on it just tells you that the policies contained within them are security related policies.  You are not being restricted in any way from seeing certain policies.

Thanks,
cfairley
0
 
LVL 9

Author Comment

by:binary_1001010
ID: 12592400
but i can't change the setting inside, I already logon as administrator.
0
 
LVL 11

Expert Comment

by:cfairley
ID: 12592430
Now I see that you are looking at the policy from your local computer.  What's happening is that you are receiving policy setting from the domain that are applying to your local PC.  You will not be able to change the policy settings that have the icon that looks like two servers with a script in the middle.  You should be able to change the policies with blue icon though.
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
LVL 9

Author Comment

by:binary_1001010
ID: 12593085
My Domain span across eight-sites. We have 13 domain controllers.  

I ran "DOMAIN CONTROLLER Security Policy" on one of the server(let's call it TSH-DC), what I added was

a) Allow log on locally
b)Allow log on throught terminal services.

Then I ran gpupdate /force.

Next, I entered gpedit.msc on TSH-DC(as seen in screenshot), the changes wasn't reflected.

But, I check all other DCs in other sites, the changes were reflected.  

Strange if you ask me, the DC that I made changes on wasn't affected, but other sites were affected.

Any comments?

Thanks in advance.
0
 
LVL 11

Expert Comment

by:cfairley
ID: 12594179
That is strange.  If the TSH-DC is in the same OU as the others, the change should take effect.  Have you tried logging on through TS for that particular DC.  Maybe it's working but not listed for some reason.  I would also give it a little time.  But, really, once you did the gpupdate, it should apply.
0
 
LVL 9

Author Comment

by:binary_1001010
ID: 12603577
I tried logon throught TS, the error is Insufficient right to logon interactively.  It mean the policy wasnt reflected.....
:-(
0
 
LVL 9

Author Comment

by:binary_1001010
ID: 12623665
i solved my own problem, i need to access GPO management(install from microsoft), check the ou for inherited policy.
0
 

Accepted Solution

by:
ee_ai_construct earned 0 total points
ID: 12659742
Question answered by asker or dialog valuable.
Closed, 30 points refunded.
ee_ai_construct (replacement part #xm34)
Community Support Admin
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
This may not be a text book method to resolve VSS backup issues but it seemed to have worked on few of the Windows 2003 servers we had issues while performing a Volume Shadow Copy backup. If you have issues while performing a shadow copy backup usin…
We’ve all felt that sense of false security before—locking down external access to a database or component and feeling like we’ve done all we need to do to secure company data. But that feeling is fleeting. Attacks these days can happen in many w…
With just a little bit of  SQL and VBA, many doors open to cool things like synchronize a list box to display data relevant to other information on a form.  If you have never written code or looked at an SQL statement before, no problem! ...  give i…

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question