Solved

2008 Windows Domain Controller is missing GPO Setting needed for older 2003 servers.  How do I set this?

Posted on 2016-10-11
5
67 Views
Last Modified: 2016-10-11
Greetings,

I'm being asked to set this GPO setting and value: System objects: Default owner for objects created by members of the Administrators group' to 'Object creator'.  This is in Windows Server 2003.

however, my GPM and Domain Controllers in 2008 fail to show this line item.  How do I get it visible so I can set it for my 2003 servers?  
Thanks.
0
Comment
Question by:Evan Cutler
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 84

Expert Comment

by:oBdA
ID: 41838861
This article describes how to make it visible again for W2k3/XP (it will still not apply to anything running Vista or later):
A Group Policy setting is not available in the security policy settings list on a computer that is running Windows Server 2008
https://support.microsoft.com/en-us/kb/947721
0
 
LVL 9

Author Comment

by:Evan Cutler
ID: 41838886
Thank you.
Is there any way to do this in a standard registry push in GPO, vice changing the server itself?
0
 
LVL 47

Assisted Solution

by:Donald Stewart
Donald Stewart earned 150 total points
ID: 41838937
Yes, use group policy preferences


Computer\Preferences\Windows\Registry
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
nodefaultadminowner (REG_DWORD)
The supported values are 0 for Administrators group, or 1 for Object creator
0
 
LVL 84

Accepted Solution

by:
oBdA earned 350 total points
ID: 41838942
According to the changes suggested, it looks like it's a REG_DWORD "NoDefaultAdminOwner" in HKLM\SYSTEM\CurrentControlSet\Control\Lsa
0=Administrators group, 1=Object Creator
0
 
LVL 9

Author Closing Comment

by:Evan Cutler
ID: 41839045
Thanks guys.
0

Featured Post

Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question