Re: error when trying to get a remote security policy... Please help!!!

From: Steven L Umbach (sumbach_at_N0spam.ameritech.net)
Date: 03/31/04 

Date: Wed, 31 Mar 2004 09:36:59 -0600

Also check that you indeed are trying to access the computer with local
admin credentials. If the computer has been "hacked" by local user, etc your
account may have been removed from the local admin group. If you can access
the security logs remotely via Computer Management - other computer/Event
Viewer, then you know you have admin rights on that computer. --- Steve

"Steven L Umbach" <sumbach@N0spam.ameritech.net> wrote in message
news:%23xRNxPzFEHA.3764@TK2MSFTNGP12.phx.gbl...
> Are there any messages in Event Viewer that may indicate a problem such as
a
> corrupt secedit.sdb log?? Is this a domain machine? A regular user can not
> change local security/policy settings to lock you out but someome with
admin
> credentials could. I would also check ntfs permissions via administrative
> share to \winnt folder, \winnt\security folder, \winnt\system 32 folder,
and
> \winnt\system32\group policy folders to see that that you have proper
> permissions. Also check permissions on the mmc.exe file. I understand you
> only have remote access to this computer and not to the console? ---
Steve
>
> "Rob Roberts" <RRoberts@thisnewsgroup.com> wrote in message
> news:eKMlfOyFEHA.3880@TK2MSFTNGP10.phx.gbl...
> > Steve,
> > I have tried that and I get the message that I mentioned below. I do
> have
> > admin access on the PC that I am logged into and on the PC that I am
> trying
> > to get the security policy from, infact I have network admin access. I
am
> > using the command line: gpedit.msc /gpcomputer:"PC_Name" but I keep
> > getting the error "Failed to open Group Policy Object on... You may not
> > have appropriate rights." Any ideas as to what may be happening? Or
how
> I
> > can force the Group Policy to reset ... or something like that? Is
there
> > some way that the user could use the Local Security Policy to override
any
> > others from coming in and changing it? Any ideas would help!!
> > Thanks,
> > Jeff Beach.
> >
> >
> > "Steven Umbach" <n9rou@n0spam-comcast.net> wrote in message
> > news:2drac.141163$1p.1823362@attbi_s54...
> > > From a remote computer try using mmc Group Policy snapin - other
> computer
> > and
> > > browse or enter the target computers name/IP address. You will have to
> be
> > logged
> > > onto the remote computer with an account that has admin credentials on
> the
> > > computer you are trying to access. --- Steve
> > >
> > >
> > > "Rob Roberts" <RRoberts@thisnewsgroup.com> wrote in message
> > > news:erVy9SpFEHA.2580@TK2MSFTNGP12.phx.gbl...
> > > > I have a PC connected to the LAN and I have local admin rights on
this
> > PC.
> > > > I can connect using admin shares, I can alter the Users and Groups
> using
> > the
> > > > Computer Management tool and perform just about every other
> > administrator
> > > > task but when I try to view the Group Policy in effect on the PC I
get
> > the
> > > > following message:
> > > > Title: "Group Policy Error."
> > > > Contents: "Failed to open the Group Policy Object on ... You may
not
> > have
> > > > appropriate rights."
> > > > I am trying to access the Group Policy by using the gpedit tool with
> > command
> > > > line switches. Does anyone have any ideas as to how I can reset the
> > current
> > > > policy remotely? How could the user prevent an admin from accessing
> the
> > > > Group Policy object on that PC? Anything would help PLEASE!!
> > > > Cheers,
> > > > Jeff Beach.
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: [AppArmor 01/41] Pass struct vfsmount to the inode_create LSM hook
    ... writing security policy. ... and install shiny things if they own the box. ... SELinux and AppArmor can't ... That depends who owns the admin password. ...
    (Linux-Kernel)
  • RE: Internet Problem
    ... If I'm reading this right, you are saying they both work fine, the 2000 DCs and the 2000 Pro ... clients except if you log onto the Pro client with Admin credentials. ... The reason for this is that when you log on with the Admin credentials they are probably the ...
    (microsoft.public.win2000.networking)
  • Re: Send Login Info
    ... > I want to log to a default admin share on a server. ... > app doesn't have admin rights, but my program needs to grab files from ... How can I send admin credentials so that my app can get ...
    (microsoft.public.dotnet.languages.vb)
  • Re: administrator shares
    ... the admin credentials were obtained. ... shares was a subsequent action. ... > |> passwords to use ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Controlling Admin Access
    ... You can remove the admin shares or modify security policy so that access ... from the network is restricted to only the executives, DCs, etc. Modify ...
    (Focus-Microsoft)