Re: error when trying to get a remote security policy... Please help!!!

From: Steven L Umbach (sumbach_at_N0spam.ameritech.net)
Date: 03/31/04


Date: Wed, 31 Mar 2004 09:26:19 -0600

Are there any messages in Event Viewer that may indicate a problem such as a
corrupt secedit.sdb log?? Is this a domain machine? A regular user can not
change local security/policy settings to lock you out but someome with admin
credentials could. I would also check ntfs permissions via administrative
share to \winnt folder, \winnt\security folder, \winnt\system 32 folder, and
\winnt\system32\group policy folders to see that that you have proper
permissions. Also check permissions on the mmc.exe file. I understand you
only have remote access to this computer and not to the console? --- Steve

"Rob Roberts" <RRoberts@thisnewsgroup.com> wrote in message
news:eKMlfOyFEHA.3880@TK2MSFTNGP10.phx.gbl...
> Steve,
> I have tried that and I get the message that I mentioned below. I do
have
> admin access on the PC that I am logged into and on the PC that I am
trying
> to get the security policy from, infact I have network admin access. I am
> using the command line: gpedit.msc /gpcomputer:"PC_Name" but I keep
> getting the error "Failed to open Group Policy Object on... You may not
> have appropriate rights." Any ideas as to what may be happening? Or how
I
> can force the Group Policy to reset ... or something like that? Is there
> some way that the user could use the Local Security Policy to override any
> others from coming in and changing it? Any ideas would help!!
> Thanks,
> Jeff Beach.
>
>
> "Steven Umbach" <n9rou@n0spam-comcast.net> wrote in message
> news:2drac.141163$1p.1823362@attbi_s54...
> > From a remote computer try using mmc Group Policy snapin - other
computer
> and
> > browse or enter the target computers name/IP address. You will have to
be
> logged
> > onto the remote computer with an account that has admin credentials on
the
> > computer you are trying to access. --- Steve
> >
> >
> > "Rob Roberts" <RRoberts@thisnewsgroup.com> wrote in message
> > news:erVy9SpFEHA.2580@TK2MSFTNGP12.phx.gbl...
> > > I have a PC connected to the LAN and I have local admin rights on this
> PC.
> > > I can connect using admin shares, I can alter the Users and Groups
using
> the
> > > Computer Management tool and perform just about every other
> administrator
> > > task but when I try to view the Group Policy in effect on the PC I get
> the
> > > following message:
> > > Title: "Group Policy Error."
> > > Contents: "Failed to open the Group Policy Object on ... You may not
> have
> > > appropriate rights."
> > > I am trying to access the Group Policy by using the gpedit tool with
> command
> > > line switches. Does anyone have any ideas as to how I can reset the
> current
> > > policy remotely? How could the user prevent an admin from accessing
the
> > > Group Policy object on that PC? Anything would help PLEASE!!
> > > Cheers,
> > > Jeff Beach.
> > >
> > >
> >
> >
>
>