Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 955
  • Last Modified:

Security Settings in Group Policy Editor Server 2008

I am unable to change the settings for security in the GPEDIT.MSC for a Server 2008 machine. The folders have a lock symbol on them and the ability to change anything is grayed out.  I assume these settings have to be changed at the domain level.  I am a newcomer to Server 2008.  Can someone advise me as to how to make these changes?
0
kyleboca
Asked:
kyleboca
  • 3
  • 3
  • 2
1 Solution
 
mkbeanCommented:
Where are you attempting to make the changes and what tool are you using?  GPMC? At an OU level?  It sounds to me that you don't have permission to edit Group Policy.

Brian
0
 
kylebocaAuthor Commented:
I am setting up a new server and I do indeed have permission.  I am logged in as the administrator and am also in the domain administrators group.  I want to decide when to change a password and what type of password to use. Thats why I want to make the changes.  I was using GPEDIT.MSC like my first post said but only have experience with Server 2000 which is much less complicated.  

I think I need to make the changes at the domain and then it will be applied but am unsure how to do that.
0
 
mkbeanCommented:
Yes you need to open GPMC and perform that action on the Default Domain Policy which is linked to the Domain.  

Brian
0
Threat Trends for MSPs to Watch

See the findings.
Despite its humble beginnings, phishing has come a long way since those first crudely constructed emails. Today, phishing sites can appear and disappear in the length of a coffee break, and it takes more than a little know-how to keep your clients secure.

 
dfxdeimosCommented:
Is the server you are trying to make the change on a domain controller?
0
 
kylebocaAuthor Commented:
Yes it is the domain controller.
0
 
dfxdeimosCommented:
A domain controller doesn't have a local security context (no local accounts, security policies, etc), only a domain one.

Any changes that you wish to be made to the DC have to be made via GPOs @ the domain level (gpmc.msc).
0
 
dfxdeimosCommented:
So, what you want to do is:

(1) Go to Start -> Run -> Type "gpmc.msc" -> Hit ENTER
(2) Expand the Forest -> Expand Domains -> Right click on your domain and choose "Create a GPO in this domain, and Link it here..."
(3) Name the GPO something like "Domain Password Policy" and click OK
(4) Now expand your domain in the left pane and you will see the "Domain Password Policy" item, right click on it and choose "Edit..."
(5) Define your settings in there and they will apply to the whole domain!

A good idea is to create GPOs for each of the settings that you want to create so that you can look and say "Alright, I know this GPO only controls the password policy", etc.

Group policy can be a complicated thing, so I recommend you read up on it! Here is the TechNet site dedicated to Group Policy: http://technet.microsoft.com/en-us/windowsserver/grouppolicy/default.aspx
0
 
kylebocaAuthor Commented:
Excellent and accurate advice Mr dfxdeimos.  Password policy successfully edited.  Thanks for your time.
0

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

  • 3
  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now