shutdown without logon not possible anymore ?

From: Alex Acetozi (askme@email.com)
Date: 04/10/03 

From: "Alex Acetozi" <askme@email.com>
Date: Thu, 10 Apr 2003 05:56:46 -0700

Hi, Ok..

Since the domain policy "replace" the local policy thatīs
why you were having problems, because you were setting the
local policy but the domain was not defined. :P. You could
also instead of removing the computer object from the
computers container to a new OU, just ckeck the option
block inherit permission from parent object. It would
prevent the policy to take effect over the computer
container.

[]īs

Alex

>-----Original Message-----
>Thanks for your help, I solved the problem, but I still
>don't understand it...
>
>The default domain policy the value "not defined"
>for "ShutdownWithoutLogon", I thougt the policys were
>merged and not replaced, but maybe I am wrong.
>
>Anyway, I moved the computer account in AD
>from "computers" to another OU (which has no group
>policies defined, so the default domain policy should be
>used the same way.)
>
>As a result, the local policy was "reseted", the value
was
>again "disabled" and a simple "enable" worked immediately.
>
>Cheers
>Wolfgang
>>-----Originalnachricht-----
>>Does the everyone group have read permission to this
>>policy ? Did you run the secedit comand line to force
the
>>policy to propagate ? Is this machine member of the
>domain
>>if so the local policy is replaced by the Default Domain
>>Policy.
>>
>>Good Luck,
>>Alex Acetozi
>>MCP,MCSA,CCNA
>
>.
>

Relevant Pages

  • Re: SMB and Active Directory logon credentials problem
    ... > folders in the hierarchy from Security Settings on down. ... > was controlling this and making the local policy unchangeable. ... > was enable (in contrast to the domain policy which states it is ...
    (microsoft.public.windows.server.sbs)
  • SMB and Active Directory logon credentials problem
    ... controlling this and making the local policy unchangeable. ... the domain policy which states it is disabled). ... how do I 'unlock' the security settings so that I can modify them ...
    (microsoft.public.windows.server.sbs)
  • Re: GROUP POLICY
    ... What exactly do you mean with "the policy file only appear in the primary DC"? ... domain policy are applied, that's by design. ... GPO: Default Domain Policy ... Computer Setting: 3 ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local DC Group Policy being applied for passwrds not the Defau
    ... Default Domain Policy being applied, but the password policies are not being ... Password Policies are being overridden by the local computer policy on the ...
    (microsoft.public.windows.server.active_directory)
  • RE: Companyweb and guests - advice?
    ... You can find the Default Domain policy under the following node: ... Open server management console, locate Advanced Management -> Group Policy ...
    (microsoft.public.windows.server.sbs)