Security Settings in Group Policy Editor Server 2008

I am unable to change the settings for security in the GPEDIT.MSC for a Server 2008 machine. The folders have a lock symbol on them and the ability to change anything is grayed out.  I assume these settings have to be changed at the domain level.  I am a newcomer to Server 2008.  Can someone advise me as to how to make these changes?
kylebocaAsked:
Who is Participating?
 
dfxdeimosConnect With a Mentor Commented:
So, what you want to do is:

(1) Go to Start -> Run -> Type "gpmc.msc" -> Hit ENTER
(2) Expand the Forest -> Expand Domains -> Right click on your domain and choose "Create a GPO in this domain, and Link it here..."
(3) Name the GPO something like "Domain Password Policy" and click OK
(4) Now expand your domain in the left pane and you will see the "Domain Password Policy" item, right click on it and choose "Edit..."
(5) Define your settings in there and they will apply to the whole domain!

A good idea is to create GPOs for each of the settings that you want to create so that you can look and say "Alright, I know this GPO only controls the password policy", etc.

Group policy can be a complicated thing, so I recommend you read up on it! Here is the TechNet site dedicated to Group Policy: http://technet.microsoft.com/en-us/windowsserver/grouppolicy/default.aspx
0
 
BrianIT ManagerCommented:
Where are you attempting to make the changes and what tool are you using?  GPMC? At an OU level?  It sounds to me that you don't have permission to edit Group Policy.

Brian
0
 
kylebocaAuthor Commented:
I am setting up a new server and I do indeed have permission.  I am logged in as the administrator and am also in the domain administrators group.  I want to decide when to change a password and what type of password to use. Thats why I want to make the changes.  I was using GPEDIT.MSC like my first post said but only have experience with Server 2000 which is much less complicated.  

I think I need to make the changes at the domain and then it will be applied but am unsure how to do that.
0
Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

 
BrianIT ManagerCommented:
Yes you need to open GPMC and perform that action on the Default Domain Policy which is linked to the Domain.  

Brian
0
 
dfxdeimosCommented:
Is the server you are trying to make the change on a domain controller?
0
 
kylebocaAuthor Commented:
Yes it is the domain controller.
0
 
dfxdeimosCommented:
A domain controller doesn't have a local security context (no local accounts, security policies, etc), only a domain one.

Any changes that you wish to be made to the DC have to be made via GPOs @ the domain level (gpmc.msc).
0
 
kylebocaAuthor Commented:
Excellent and accurate advice Mr dfxdeimos.  Password policy successfully edited.  Thanks for your time.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.