Solved

I need assistance on how to change the default owner when the policy is not exposed.

Posted on 2008-10-02
2
1,306 Views
Last Modified: 2011-09-20
AIF inbound requires that we change the default owner of inbound files.  As explained in Microsoft KB article 947721 this setting is not available in security policy settings list.  It refers to article 214752 which gives an example How to add custom registry settings to Security Configuration Editor.  But this example is not clear to me and it is about XP anyway.  I need assistance on how to change the default owner in Windows 2008 when the policy is not exposed.  Thank you.
0
Comment
Question by:harkeninc
2 Comments
 

Author Comment

by:harkeninc
Comment Utility
The following abc instructions are provided:  
a. Click Start > All Programs > Administrative Tools > Local Security Policy.
b. On the Local Security Settings menu, navigate to Security Settings > Local Policies > Security Options.
c. Change the Security Settings for the System Objects: Default owner for objects created by members of the administrator's group from Administrators group to Object creator.
The following AIF application error is being displayed:
File ... cannot be read because the submitting user could not be determined. The default owner for objects created by members of the Administrators group must be set to the object creator.
0
 
LVL 31

Accepted Solution

by:
Henrik Johansson earned 500 total points
Comment Utility
In %WINDIR%\inf\sceregvl.inf, add following lines.

in section [register registry values]
MACHINE\System\CurrentControlSet\Control\Lsa\NoDefaultAdminOwner,4,%NoDefaultAdminOwner%,3,0|%DefaultOwner0%,1|%DefaultOwner1%


in section [strings]
NoDefaultAdminOwner = "System objects: Default owner for objects created by members of the Administrators group"
DefaultOwner0 = "Administrators group"
DefaultOwner1 = "Object creator"

0

Featured Post

Do email signature updates give you a headache?

Do you feel like all of your time is spent managing email signatures? Too busy to visit every user’s desk to make updates? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today!

Join & Write a Comment

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now