Solved

I need assistance on how to change the default owner when the policy is not exposed.

Posted on 2008-10-02
2
1,328 Views
Last Modified: 2011-09-20
AIF inbound requires that we change the default owner of inbound files.  As explained in Microsoft KB article 947721 this setting is not available in security policy settings list.  It refers to article 214752 which gives an example How to add custom registry settings to Security Configuration Editor.  But this example is not clear to me and it is about XP anyway.  I need assistance on how to change the default owner in Windows 2008 when the policy is not exposed.  Thank you.
0
Comment
Question by:harkeninc
2 Comments
 

Author Comment

by:harkeninc
ID: 22633497
The following abc instructions are provided:  
a. Click Start > All Programs > Administrative Tools > Local Security Policy.
b. On the Local Security Settings menu, navigate to Security Settings > Local Policies > Security Options.
c. Change the Security Settings for the System Objects: Default owner for objects created by members of the administrator's group from Administrators group to Object creator.
The following AIF application error is being displayed:
File ... cannot be read because the submitting user could not be determined. The default owner for objects created by members of the Administrators group must be set to the object creator.
0
 
LVL 31

Accepted Solution

by:
Henrik Johansson earned 500 total points
ID: 22640152
In %WINDIR%\inf\sceregvl.inf, add following lines.

in section [register registry values]
MACHINE\System\CurrentControlSet\Control\Lsa\NoDefaultAdminOwner,4,%NoDefaultAdminOwner%,3,0|%DefaultOwner0%,1|%DefaultOwner1%


in section [strings]
NoDefaultAdminOwner = "System objects: Default owner for objects created by members of the Administrators group"
DefaultOwner0 = "Administrators group"
DefaultOwner1 = "Object creator"

0

Featured Post

Zoho SalesIQ

Hassle-free live chat software re-imagined for business growth. 2 users, always free.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now