I am using Win2003 Server Standard edtion and i am unable to make any changes to group policy objects. I get an error 'Access denied' anytime i try to modify a group policy or edit the security settings on a GPO.
I am logged in as the administrator when i attempt this so I dont know what the problem is.
I did some looking and see that i can use the secedit command to reset the security settings back to default. Also the secedit command allows me to specify to only reset the security settings on GPOs, and leave user rights, security policies and other stuff alone.
How do i use the secedit command to do this? I am unsure of how to use the /DB and /CFG switches. Apparently it is required but i do not have a file or security template to apply. I am just resetting to default.
I was thinking something like
secedit /configure <?? /db /cfg stuff here??> /areas GROUP_MGMP /log c:\myseceditlog.txt /verbose
I am not even 100% sure this will solve my problem.
My current security configuration on my Group Policy Object I am trying to modify but cannot looks like this:
Authenticated Users: Read, Apply Group Policy
CREATOR OWNER: Special Permissions (Greyed out)
Domain Admins: Read, Write, Create Child Objects, Delete Child Objects, Special Permissions (Greyed out)
Enterprise Admins: Same as Domain admins
Enterprise Domain Controllers: Read, Special Permissons (Greyed out)
System: Same as Domain Admins
I notice nobody has Full Control permission. Is this the problem that secedit will fix?