local security policy problem (virus?)

From: dejann@
Date: 08/09/02 

From: <dejann@>
Date: Fri, 9 Aug 2002 15:53:26 +1200

Hi,
I have a problem with local security policy on Win2k (sp3) workstation.
Workstation is part of a domain.

What happens is that the workstation is loosing local security settings. Log
on locally and log on as service settings are affected.

I first noticed this when no one could log on to this PC, not even the
administrators (both local and domain). It was accessible from the network,
so I used ntrights.exe to give administrators group SeInteractivelogonRight.
This enabled me to log on.

I discovered that one domain user has log on locally right. Local policy
setting box is clear, but effective policy setting is checked for that user.
This cannot be changed except through ntrights. Users can be added but
effective policy does not change. Again, changes can only be made through
NtRights.

Any attempt to make local security policy changes results in return to the
original state: one domain user (not administrator) has log on rights but no
one else.

To make things worse, I had a call from a remote user with the same problem
on his laptop!! I am starting to think that we have a virus despite McAffee
virus scan 4.5.1 SP1 (corporate edition) with the latest dat's.

If anyone has any idea what is causing this please contact me on
dejan@gmx.co.uk

Regards,
Dejan Nakarada-Kordic

Relevant Pages

  • Re: local security policy
    ... Local security policy was changed in WinXP. ... snapin are the same settings that exist on the machine. ... "paul kramer" wrote in message ...
    (microsoft.public.windowsxp.security_admin)
  • Create one desktop access for multiple users
    ... You might have to use a local security policy. ... through the settings. ... >An XP workstation is located in a multimedia room. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Backing Up Local Policy Settings
    ... Open up Local Security Policy. ... security settings/right click/export and you will be able to export Local Security ... security settings back to default "defined" levels. ... > Would like to know if there's a way to backup/export Local Security Policy ...
    (microsoft.public.win2000.security)
  • Re: Workstation only security limitations
    ... Using the local security on a workstation, ... > To the best of my knowledge, local and domain group policies both have ... > or less the same options and settings. ...
    (microsoft.public.win2000.security)
  • RE: LSA settings
    ... i have gone through a lot of reading about LSA etc. ... and set different local security settings on the *local* workstation. ... There are several hundred settings here. ... >> i am trying to programmatically change the local security policy. ...
    (microsoft.public.platformsdk.security)