Re: Getting local security settings effective

From: S. Pidgorny [MVP] (slavickp@yahoo.com)
Date: 11/17/02


From: "S. Pidgorny [MVP]" <slavickp@yahoo.com>
Date: Sun, 17 Nov 2002 11:41:58 +1100


Jeff,

secedit /refreshpolicy machine_policy /enforce

is the command for immediate update of security policies.

Also, in Windows 2000 AD environment site, domain and OU settings all
override local policies. Use gpresult.exe to find out the set of policies
applied to the client, and AD Users and Computers MMC to link a security
policy at domain/OU level.

--
Svyatoslav Pidgorny, MS MVP, MCSE
-= F1 is the key =-
"Jeff Marchione" <jeffmarchione@ameritech.net> wrote in message
news:3d7801c28da9$8cc9f3b0$89f82ecf@TK2MSFTNGXA01...
> I have a computer on our Windows 2000 network that can not
> be seen by anyone on the network but still can access the
> server from the machine.  Upon investigation, I found that
> under "Local Security Policy -- Local Policies -- User
> Rights Assignment"  the "Access this computer from the
> network" was blank, no permissions.  Don't know how this
> happpened, probably a virus?  I found the default
> permissions from another machine and added them but they
> only show up as "local settings" not "effective
> settings".  How do I get them applied to be "effective"?
>
> Thanks,
> Jeff


Relevant Pages

  • Re: AD Policy audit tool for Windows 2000
    ... I don't need a report showing me the status of every ... This can compare settings ... Does this run on Windows 2000? ... I am trying to find the policies that has been changed by ...
    (Security-Basics)
  • Re: Group Policy Orphaned
    ... Windows NT 4 style policies are permanent registry changes ... Windows Platform Support Team ... now I am using Group Policy for server ... > Is there a way to reset all of these settings on the ...
    (microsoft.public.windows.group_policy)
  • Re: USB Sticks for users
    ... Set of Policies) tool on Windows XP, or the Windows Server 2003 DCs, to ... I did a walkthrough of all GPO settings and found some that bothered me: ...
    (microsoft.public.win2000.networking)
  • Re: Admin policies Taking over
    ... Every time windows starts, it displays windows ... > classic visual settings, i change it to XP display settings, log out then ... > devices) it says "system administrator has set policies to prevent this ...
    (microsoft.public.windowsxp.perform_maintain)
  • please help me in windows 2000 gpo functionalities
    ... the day one i started windows 2000 classes i ... policies, or the mistake from my side.. ... security policies, the only security policies are not at ... only domain level policies are ...
    (microsoft.public.win2000.security)