Local v. Effective security setting

From: S. Shew (shew.1@osu.edu)
Date: 09/04/02 

From: "S. Shew" <shew.1@osu.edu>
Date: Wed, 04 Sep 2002 04:34:38 -0700

I have a user having problems with Local v. Effective Settings.

Win2000, SP2 (although SP3 has been installed and uninstalled).

Specifically, the effective setting for "Unsigned driver installation
behavior" (in Local Security Settings | Security Settings | Local
Policies | Security Options) is "Do not allow installation,"
regardless of what we set for Local Setting. This workstation
is a member of a small domain (one DC, no additional sites or
OUs set up), as far as I can see this option is not defined on
the domain, and other workstations in the domain do not have this
effective setting for this policy.

About the time the user applied SP3, he also applied several
of the standard security templates.

Using the Security Configuration and Analysis plug-in, we can get
the Computer Setting to be what we want, but the Effective Setting
in Local Security Settings stays Do not allow installation, and we
can't install an unsigned video card driver.

I know that domain settings trump local settings, but other domain
members don't have this policy set so restrictively.

Any thoughts greatly appreciated.

Thanks,
Sandy

Relevant Pages

  • Re: Windows 2000 SP2 local policy settings not stored using SIDs?
    ... I think you finally answered my question about security settings in Win2k. ... After a few moments I was no longer able to log on to my server ...
    (NT-Bugtraq)
  • Re: Local Account & Password Policy Options Greyed out for Admins?
    ... it seems to have set the security settings back to what they should be. ... Still, the settings for the password and account lockout policies are greyed out, so they still cannot be changed. ... Reboot the computer and you should be able to change password policy in Local Security Policy. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: images blocked
    ... "Steve Cochran" wrote: ... wonder if there's some underlying security settings in that .NET Framework ... So you suggested the Tool> Options & uncheck the HTML content box? ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: images blocked
    ... thanks for the tips and I see my Yahoo web mail still has html graphics. ... "Steve Cochran" wrote: ... wonder if there's some underlying security settings in that .NET ... Have confirmed all the Security settings as described here ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • RE: Windows 2000 security
    ... domain admin from doing anything), ... "Administrator" account of the windows domain of which a machine is a member ... Any security settings in a Windows 2000 domain are managed at the domain ...
    (Security-Basics)
Quantcast