2008 Windows Domain Controller is missing GPO Setting needed for older 2003 servers. How do I set this?

Greetings,

I'm being asked to set this GPO setting and value: System objects: Default owner for objects created by members of the Administrators group' to 'Object creator'.  This is in Windows Server 2003.

however, my GPM and Domain Controllers in 2008 fail to show this line item.  How do I get it visible so I can set it for my 2003 servers?  
Thanks.
LVL 9
Evan CutlerVolunteer Chief Information OfficerAsked:
Who is Participating?
 
oBdAConnect With a Mentor Commented:
According to the changes suggested, it looks like it's a REG_DWORD "NoDefaultAdminOwner" in HKLM\SYSTEM\CurrentControlSet\Control\Lsa
0=Administrators group, 1=Object Creator
0
 
oBdACommented:
This article describes how to make it visible again for W2k3/XP (it will still not apply to anything running Vista or later):
A Group Policy setting is not available in the security policy settings list on a computer that is running Windows Server 2008
https://support.microsoft.com/en-us/kb/947721
0
 
Evan CutlerVolunteer Chief Information OfficerAuthor Commented:
Thank you.
Is there any way to do this in a standard registry push in GPO, vice changing the server itself?
0
 
DonConnect With a Mentor Network AdministratorCommented:
Yes, use group policy preferences


Computer\Preferences\Windows\Registry
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
nodefaultadminowner (REG_DWORD)
The supported values are 0 for Administrators group, or 1 for Object creator
0
 
Evan CutlerVolunteer Chief Information OfficerAuthor Commented:
Thanks guys.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.