Re: Cannot Open Local Policy Database

From: AD (ajd777@hotmail.com)
Date: 02/13/03


From: "AD" <ajd777@hotmail.com>
Date: Thu, 13 Feb 2003 21:27:29 -0000


Hi,

might be worth checking the security on c:\winnt\system32\group policy
folder ( this folder is hidden) and make sure administrators has access.

One thing we do to stop local policy applying to admins is remove access to
admins on this dir, hence local policy will not be applied.

BUT. iff you run gpedit.msc with this access denied to the group policy
folder you get an error similar to yours

cheers

AD
"Brian Palombo" <brian.m.palombo@lmco.com> wrote in message
news:046501c2d1d9$e0cec1b0$a301280a@phx.gbl...
> I recently built a new Win2K w/SP3 machine to include all
> Security patches. I imported the compatws.inf template.
> The local security policy worked and was accessible as I
> did test it and change it. I then ran the sysprep
> utilities and imaged the system (PowerQuest Deploy Center
> or Drive Image).
>
> Now when I bring up a new system with the image file and
> try to access the Local Security Policy (as the local
> admin ofcourse), I get the error "Windows cannot open the
> local policy database"
>
> I've been building these baseline images the same way for
> two years without any issues. With the exception of
> adding newer security patches and service packs nothing
> has changed in my installation process.
>
> I'm loading a IBM NetVista this time, but have done this a
> thousand times on HPs, Dells, Gateways, etc.
>
> Anybody else run in to this issue or have a clue what I
> can do to correct it? I've been through just about every
> related article in technet that I can find and have tried
> a variety of fixes that haven't made a dent.
>
> Two other errors to note. Once I join the machine to a
> domain where the domain admin is added to the local
> machine admin group, the domain admin does not have
> permission to manage the computer. When trying to use the
> management console, the error "Temporary directory is not
> found or there is not enough disk space" comes up.
>
> This is obviously a permission error (but doesn't make
> sense) and I believe it is related to the first issue to.
> Some thing is grossly wrong with the security policy on
> this machine.
>
> I can't even use the Security Configuration and Analysis
> snap-in to try and re-add a template. For this one I get
> the error "The system cannot find the file specified"
>
> Any and all help would be greatly appreciated.
>
> Brian