Group Policy editor (gpedit.msc) - can't modify certain values

I'm trying to use the Group Policy editor to enable some security measures (i.e. password complexity, account lock out, etc.).  For some reason, Windows XP Pro isn't letting me make changes to those values. I guess my questions are:

1. Why is it some of the choices are locked?
2. How do I unlock them so I can change them?

The system is WindowsXP SP2 Pro.

I'll provide any othe rinfo as needed. Thanks!
sjc2237Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

luv2smileCommented:
Are you logged in as an administrator?

Is this workstation a part of a domain?
0
sjc2237Author Commented:
1. Yes, the system is part of a domain. IF need be, it is simple enough for me to temporarily remov eit from the domain. Currently, the domain it is attached to is Windows2000 mixed-mode.

2. Yes, I am logged in as the administrator for the system. I've also tried other accounts with Administrative privelages too.
0
luv2smileCommented:
It sounds like they may be locked out because there is a server policy that is over riding the local policy.

Is there a particular reason why you are trying to set this via the local policy instead of using group policy in active directory?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Cloud Class® Course: Microsoft Windows 7 Basic

This introductory course to Windows 7 environment will teach you about working with the Windows operating system. You will learn about basic functions including start menu; the desktop; managing files, folders, and libraries.

luv2smileCommented:
Remember that any domain policies will override local policies.
0
sjc2237Author Commented:
Yep; that's what it was. The domain was overriding the local. I removed the system from the domain & was able to make the changes.

Now to answer your other question (heavy sigh)...

We have domains, but we do not have our users log into them. All systems are logged into locally & authenticate against the network as needed. In this one case, the users do log into the domain because Rational ClearCase will not function if the user does not log into the domain.
0
luv2smileCommented:
Got ya...glad it worked.

But just remember that if you add it back to the domain....any policies on the domain will override your local policy. So if the same policy is set on the domain for that computer...then the computer will get the domain policy and not the local policy.

To keep the domain policy from applying...you'd have to make the change from active directory.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows XP

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.