?
Solved

How do I unlock policies that are locked in Windows Server 2008

Posted on 2009-04-29
4
Medium Priority
?
2,467 Views
Last Modified: 2012-05-06
How do I unlock policies that are locked in Windows Serve 2008.  I'm running an evaluation copy of Windows Server 2008 and I need access to Domain Policy Settings as seen in my attachment and described below.  They are locked (greyed out in the local server GPO editor) and the Default Domain Policy mmc will not run.  I need to set these settings in order to attach a MAC to the active directory.  I had no problem in Server 2003, but 2008 it's locked up tight.  Articles I've read say that SMB takes up too many resources as the reason it it is locked.  Is there a registry solution?

Connect a Mac to Windows Small Business Server

http://www.applesource.com.au/how-to/soa/Connect-a-Mac-to-Windows-Small-Business-Server/0,2000451082,339287478,00.htm

Locate the two policies - Microsoft Network Server: Digitally Sign Communications (Always) and Microsoft Network Server: Digitally Sign Communications (If Client Agrees), as seen in Figure D. Right-click each, and select Properties. Check the Define This Policy Setting box and select the Disabled radio button and press OK to close the Security Policy Setting window.

Locate the two policies - Microsoft Network Server: Digitally Sign Communications (Always) and Microsoft Network Server: Digitally Sign Communications (If Client Agrees), as seen in Figure D. Right-click each, and select Properties. Check the Define This Policy Setting box and select the Disabled radio button and press OK to close the Security Policy Setting window.

Open in new window

grouppol3.jpg
0
Comment
Question by:wsurferdude
  • 2
  • 2
4 Comments
 
LVL 58

Expert Comment

by:tigermatt
ID: 24272590

How are you attempting to edit the policy? Using the Group Policy Management Console (GPMC)?

-Matt
0
 

Author Comment

by:wsurferdude
ID: 24276599
Yep,

The GPMC...  I can view the local machine policy, but not the default doman policy.  It clains that it cannot be loaded.  I just started getting counterfeit messages today and only started using it a few days ago.  I read that you can use it for 30 days in evaluation mode, but it's Microsoft...

Thanks,
John

I might try a fresh load on a different machine and see what happens unless I can unlock it to see how successful it is working with a combined PC/MAC environment...
0
 
LVL 58

Accepted Solution

by:
tigermatt earned 2000 total points
ID: 24280862

An evaluation edition is fully functional for the duration of the trial. There are no restrictions, so this issue indicates either a configuration issue or some form of corruption.

I would suggest attempting to reset the Default Domain Controllers Policy on the server. The command dcgpofix /target:domain can be used to do this.

-Matt
0
 

Author Closing Comment

by:wsurferdude
ID: 31576273
Thanks Matt... You hit the solution.  It was a configuration problem.  
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

An introduction to the wonderful sport of Scam Baiting.  Learn how to help fight scammers by beating them at their own game. This great pass time helps the world, while providing an endless source of entertainment. Enjoy!
Resolving an irritating Remote Desktop connection that stops your saved credentials from being used.
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question