Re: windows 20000 problem

From: Steve (ste_at_nospam.com)
Date: 02/26/04 

Date: Thu, 26 Feb 2004 09:45:42 -0000

Steve,

Thanks for you reply much appreciated...

I know that the computer is not being locked down by group policies which is
what is puzzling me more than anything. If I log onto any other PC as
administrator then it is fine it is just this PC in particular. I have tried
absolutely everything in my knowledge which is why I have posted to the
NG's. I have even disjoined the server from the domain and re-added again to
no avial. The PC is in the same OU as all the other servers that aren't DC's
and the administrator is in an OU where the policy doesnt apply. I have
also checked local policies for the PC and there is nothing amiss here
either. If you are as stumped as I am then I think I am going to have to
rebuild which I don't really want to do as this is our intranet server. The
PC is not locked down if i log in as local admin and the domain admin is
part of the local admin group on the PC

weird isn't it

Steve

"Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
news:wK4%b.58234$4o.76544@attbi_s52...
> Domain policy will also apply to users and computers in Organizational
Units if
> overriding settings are not defined in the OU. If the administrator is in
a different
> container than the OU then try reversing the settings in that OU or try
enabling
> "block inheritance" or that OU. Keep in mind that block inheritance can
not block
> higher level GPO's that have "no override" enabled. Otherwise try
filtering Group
> Policy that you have configured to not apply to the administrators group
by selecting
> Group Policy/properties/security and give deny permissions to the
administrators
> group for apply policy. See the link below for more details. --- Steve
>
> http://support.microsoft.com/default.aspx?scid=kb;en-us;322176
>
>
> "Steve" <ste@nospam.com> wrote in message
> news:uIFe4H6%23DHA.3220@TK2MSFTNGP10.phx.gbl...
> > Hi NG,
> >
> > When I log into one of my servers as the domain administrator, the
> > administrator is locked down the same way as any of my domain users are
> > locked down by a group policy I have applied to the domain.
> >
> > The group policy has not been applied to any organisational units that
> > contain the server or the administrator so I ran the GPRESULT.exe tool
from
> > the windows 2000 resource kit to see if this could tell me what group
> > policies have neen applied and although the session is locked down it
> > doesn't display any GP's that could have been applied (domain user
policy
> > hasn't been applied)
> >
> > any ideas I am stumped
> >
> > Thanks in advance
> >
> > Steve
> >
> >
>
>

Relevant Pages

  • Re: Move W2K3 server to its own OU seperate from SBS (MyBusiness) OU
    ... I would like to filter these two ... policies from inheriting the default domain policies of the SBS server. ... Policy it is because I cannot manage it from the local machine. ...
    (microsoft.public.windows.server.sbs)
  • Re: Move W2K3 server to its own OU seperate from SBS (MyBusiness) OU
    ... OU and move the member server to so that it does not inherit it's GPO from ... policies from inheriting the default domain policies of the SBS ... section of the default domain policy. ... In direct answer to your question, you would need to filter this ...
    (microsoft.public.windows.server.sbs)
  • Re: administrator locked out of SBS 2003
    ... Try to logon to the console using this account. ... see which groups the administrator is a member of and post back ... Even the VMware KB's as I've all ready discovered the server V2.0 ... so I deleted the policy. ...
    (microsoft.public.windows.server.sbs)
  • RE: WinXP SP3 - Local Security Policy
    ... policies to different users on a Windows XP SP3 standalone machine. ... Log on to the computer as an administrator. ... Close the Gpedit.msc Group Policy snap-in. ... Click Start, point to Control Panel, and then click Folder Options. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Do system policies affect administrators
    ... > Group Policies in Windows 2000 can indeed apply to local administrators ... > may decide to create a local administrator account to logon to avoid any ... > Group Policy via gpedit.msc will apply to all users logging on locally ... > first use filemon and logon to a computer as a regular user and then start ...
    (microsoft.public.win2000.networking)