Local security settings in W2k adv server causes problems

From: Tomaso Vasella (tomaso@consultech.net)
Date: 11/14/02 

From: Tomaso Vasella <tomaso@consultech.net>
To: focus-ms@securityfocus.com
Date: Thu, 14 Nov 2002 01:32:54 -0500

Hello List,

I am experiencing a pretty weird problem with some local policy settings on
a Windows 2000 advanced server. There is a MMC to set the "Local Security
Settings". I used this to rename the administrator account on that server,
after rebooting the machine, both the "local setting" and the "effective
setting" column showed the new name for the admin account. I could also
normally log in to the machine with that new username and didn't experience
any problems.
After about one week, I noticed some strange behavior on that machine, I
could no longer access any item in the administrative tools menu. It came to
a point where I could do almost nothing on that machine anymore. Whenever I
tried to run a program, it said "Unable to run this command."
So I rebooted the machine and everything worked normally again (using that
renamed admin account). However, after I opened the Local Security Settings
MMC, I noticed that the policy called "Rename administrator account"
suddenly said "Not defined". In the local account manager the account showed
up with the changed username though. So I defined the policy again, rebooted
the machine and it worked well for about another week. Then the exact same
scenario happened again, policy seems to be no longer defined, programs
cannot be run etc. Strangely enough, the services on the machine seem to run
just fine, I can access shares, including C$ with the renamed admin account
username, IIS is fine too.
This machine is a running as a web server, its not a member of a domain and
the windows installation is fresh. I really don't know what might cause this
odd behavior.

Any input will be greatly appreciated!

Tomaso Vasella

Relevant Pages

  • Re: RWW and Remote desktop stopped working on all clients
    ... After diggin through ALL the group policies, I found Remote ... Desktop DISABLED under the Account Lockout policy - I don't think I've even ... adminsitrator or another account with Domain Admin role; also the server ...
    (microsoft.public.windows.server.sbs)
  • Re: Cant send/receive!!
    ... It appears that your settings for Gmail are correct now. ... Hotmail account, you can use it to send a message to your Gmail ... is pop.gmail.com and the outgoing mail server which is smtp.gmail.com It ...
    (microsoft.public.windows.vista.mail)
  • Re: Can receive email, but cant send email
    ... Start Microsoft Outlook 2007. ... menu, select Account Settings, and then click New. ... Account dialog box, select Microsoft Exchange, POP3, IMAP, or HTTP, then ... additional server types, and then click Next. ...
    (microsoft.public.outlook.installation)
  • Re: Userenv Event ID 1054
    ... Did you add the slow link item to you policy or make another GPO ... To disable slow link detection on the SBS Server, ... please refer to the following settings to modify the ...
    (microsoft.public.windows.server.sbs)
  • Re: Terminal Server logon problem
    ... I upgraded our current SBS 2003 box to new hardware using SBSMigration.com's ... When it was time to bring the old SBS server offiline and make ... I am getting a group policy error - You do not have permissions to ... The only thing I thought I changed was taking the administrators account ...
    (microsoft.public.windows.server.general)
Loading