Re: ADMINISTRATOR HAS LOST ACCESS RIGHTS

From: Karl Levinson [x y] mvp (levinson_k@excite.com)
Date: 11/08/02 

From: "Karl Levinson [x y] mvp" <levinson_k@excite.com>
Date: Fri, 8 Nov 2002 14:42:43 -0500

"kspann" <kenien@earthlink.net> wrote in message
news:725101c28755$70f59db0$39ef2ecf@TKMSFTNGXA08...
> For some reason my administrator login no longer has
> certain rights, i believe this my be due to tampering with
> group policy. i am running win2k server and need 2 know
> what i can do to correct this

It would be useful to know what the missing rights are, and/or what the
error messages are.

If you can figure out what the missing permissions are, change them back in
the Group Policy MMC. Note that local group policy is overwritten by any
group policies on the domain, and last by the OUs containing the user and
the computer. Also, for many of the group policy settings, loosening /
disabling the setting in group policy does not necessarily change the
corresponding registry entry to the looser setting... it just permits you to
change the setting manually. You would need to search for the name of that
group policy setting in www.google.com to find the corresponding registry
entry.

If you want to try restoring the LOCAL [not the domain] group policy to the
default, see below:

http://securityadmin.info/faq.htm#4.41
http://securityadmin.info/faq.htm#auditing

Relevant Pages

  • Re: Windows Update - Domain Controller
    ... it will show all the current Group Policy settings applied to the computer ... If it is computer configuration you could filter the GPO to ... >I am trying to allow Windows Update on my domain controllers using Server ...
    (microsoft.public.windows.group_policy)
  • Re: Need help configuring security on a stand alone terminal server.
    ... They allow you to set group policy settings that *only* ... Right-click on the GroupPolicy folder and choose Properties ... On the Security tab, ...
    (microsoft.public.windows.terminal_services)
  • Re: Need help configuring security on a stand alone terminal server.
    ... They allow you to set group policy settings that *only* ... They will *not* allow you to edit some ... On the Security tab, ...
    (microsoft.public.windows.terminal_services)
  • Re: manager user accounts
    ... You have a concern about the group policy settings applied on the clients. ... computer and which GPO the settings are in, you can restore the settings to ...
    (microsoft.public.windows.server.sbs)
  • Move a user into an OU while logging on
    ... I am trying to move a user into a designated OU using a login script before ... the group policy settings are run for that user, ... have access to a limited desktop until the SQL server information has been ...
    (microsoft.public.scripting.vbscript)