RE: FW: Local Security Policy

From: Scott Cleven-Mulcahy (scottcm3_at_hotmail.com)
Date: 12/19/03

  • Next message: Hoffmann, Aran: "RE: TCP/IP Stack Hardening" 
    To: jhawley@arescorporation.com
Date: Fri, 19 Dec 2003 13:38:02 -0600

    I recently dealt with the same problem. Take a look at your GPO Event Log
    settings. The 3 that start with "Prevent local guests group from accessing"
    are for pre-W2K3 only. W2K3 supports full fledged permissions on the audit
    logs so you can get more granular. Take a look at
    http://support.microsoft.com/default.aspx?scid=kb;en-us;323076

    You may want to consider installing the Group Policy Management Console,
    too. It really helps in identifying which setting is causing a problem.

    Scott

    >-----Original Message-----
    >From: Jeffrey D. Hawley [mailto:jhawley@arescorporation.com]
    >Sent: Friday, December 19, 2003 1:22 PM
    >To: focus-ms@securityfocus.com
    >Subject: Local Security Policy
    >
    >
    >Hello,
    >
    >Recently, on a cluster in my domain that has two nodes that are running 2k3
    >server, I attempted to look at the local security policies I get the
    >following
    >error:
    >
    >"The Group Policy settings that apply to this machine could not be
    >determined.
    >The error occurred when trying to retreive these settings from the local
    >security policy database (%windir%\security\database\secedit.sdb) was: The
    >parameter is incorrect.
    >All local security settings will be displayed, but no indication will be
    >given
    >as to whether or not a given security setting is defined by Group Policy.
    >Any local settings defined through the user interface may subsequently
    >overriden
    >by domain-level policies."
    >
    >I used esentutl to check the integrity and that is fine, but I get error
    >-1003
    >when attempting to recovery or repair secedit.sdb.
    >Any help on a fix and what may have caused this would be appreciated.
    >Thank
    >you.
    >
    >Jeff

    _________________________________________________________________
    Tired of slow downloads? Compare online deals from your local high-speed
    providers now. https://broadband.msn.com

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Hoffmann, Aran: "RE: TCP/IP Stack Hardening"

    Relevant Pages

    • RE: Several Problems; how to reset security and troubleshoot serve
      ... On the SBS security settings; I accept your response, ... On the Remote Assistance Issue I have check all of the settings as you ... What started me on the path of security problem was I had a simular problem ... Start the Microsoft Management Console Group Policy snap-in. ...
      (microsoft.public.windows.server.sbs)
    • Re: Administrator denied access to local security policy
      ... Make sure you are using a firewall. ... under documents and settings] and configuration information such as tcp/ip ... > - Sometimes when accessing Local security policy is seems ... > the local Group policy using article 278316. ...
      (microsoft.public.win2000.security)
    • Re: iNTERACTIVE LOGON welcome screen - make it go away
      ... I created a custom ADM file for these two settings ... and imported it into the GPO under the Computer Administritative templates. ... really great expertise in Group Policy often reply to posts including ... doing a gpupdate on that domain controller which ideally would be the ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Problem with Group policy settings.
      ... The machine is a standalone but it is connected to the Internet. ... ' The Group Policy secuity settings that apply to this machine could not ... All local security dettings will be displayed, ...
      (microsoft.public.security)
    • Re: group policy scrolling marquee
      ... Policy at the same time a great robust platform for configuration management ... is launced via one of the four events available through Group Policy but the ... to store their settings in one of two places. ... > As for the Marquee screen saver you'll note that the settings (including ...
      (microsoft.public.win2000.group_policy)