Re: error when trying to get a remote security policy... Please help!!!

From: Rob Roberts (RRoberts_at_thisnewsgroup.com)
Date: 03/31/04 

Date: Wed, 31 Mar 2004 10:52:46 -0500

Steve,
  I can access the PC and the security logs remotely, I can add/remove users
from the local Administrators group and perform all other functions that
require administrator access. I cannot figure this out...
Cheers.

"Steven L Umbach" <sumbach@N0spam.ameritech.net> wrote in message
news:%23ac5tVzFEHA.1156@TK2MSFTNGP12.phx.gbl...
> Also check that you indeed are trying to access the computer with local
> admin credentials. If the computer has been "hacked" by local user, etc
your
> account may have been removed from the local admin group. If you can
access
> the security logs remotely via Computer Management - other computer/Event
> Viewer, then you know you have admin rights on that computer. --- Steve
>
>
> "Steven L Umbach" <sumbach@N0spam.ameritech.net> wrote in message
> news:%23xRNxPzFEHA.3764@TK2MSFTNGP12.phx.gbl...
> > Are there any messages in Event Viewer that may indicate a problem such
as
> a
> > corrupt secedit.sdb log?? Is this a domain machine? A regular user can
not
> > change local security/policy settings to lock you out but someome with
> admin
> > credentials could. I would also check ntfs permissions via
administrative
> > share to \winnt folder, \winnt\security folder, \winnt\system 32 folder,
> and
> > \winnt\system32\group policy folders to see that that you have proper
> > permissions. Also check permissions on the mmc.exe file. I understand
you
> > only have remote access to this computer and not to the console? ---
> Steve
> >
> > "Rob Roberts" <RRoberts@thisnewsgroup.com> wrote in message
> > news:eKMlfOyFEHA.3880@TK2MSFTNGP10.phx.gbl...
> > > Steve,
> > > I have tried that and I get the message that I mentioned below. I
do
> > have
> > > admin access on the PC that I am logged into and on the PC that I am
> > trying
> > > to get the security policy from, infact I have network admin access.
I
> am
> > > using the command line: gpedit.msc /gpcomputer:"PC_Name" but I keep
> > > getting the error "Failed to open Group Policy Object on... You may
not
> > > have appropriate rights." Any ideas as to what may be happening? Or
> how
> > I
> > > can force the Group Policy to reset ... or something like that? Is
> there
> > > some way that the user could use the Local Security Policy to override
> any
> > > others from coming in and changing it? Any ideas would help!!
> > > Thanks,
> > > Jeff Beach.
> > >
> > >
> > > "Steven Umbach" <n9rou@n0spam-comcast.net> wrote in message
> > > news:2drac.141163$1p.1823362@attbi_s54...
> > > > From a remote computer try using mmc Group Policy snapin - other
> > computer
> > > and
> > > > browse or enter the target computers name/IP address. You will have
to
> > be
> > > logged
> > > > onto the remote computer with an account that has admin credentials
on
> > the
> > > > computer you are trying to access. --- Steve
> > > >
> > > >
> > > > "Rob Roberts" <RRoberts@thisnewsgroup.com> wrote in message
> > > > news:erVy9SpFEHA.2580@TK2MSFTNGP12.phx.gbl...
> > > > > I have a PC connected to the LAN and I have local admin rights on
> this
> > > PC.
> > > > > I can connect using admin shares, I can alter the Users and Groups
> > using
> > > the
> > > > > Computer Management tool and perform just about every other
> > > administrator
> > > > > task but when I try to view the Group Policy in effect on the PC I
> get
> > > the
> > > > > following message:
> > > > > Title: "Group Policy Error."
> > > > > Contents: "Failed to open the Group Policy Object on ... You may
> not
> > > have
> > > > > appropriate rights."
> > > > > I am trying to access the Group Policy by using the gpedit tool
with
> > > command
> > > > > line switches. Does anyone have any ideas as to how I can reset
the
> > > current
> > > > > policy remotely? How could the user prevent an admin from
accessing
> > the
> > > > > Group Policy object on that PC? Anything would help PLEASE!!
> > > > > Cheers,
> > > > > Jeff Beach.
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: RDC and the Console Mode.
    ... "To log on to this remote console session, ... permissions on this computer" ... local administrators group are allowed to log on with mstsc /console. ...
    (microsoft.public.windows.terminal_services)
  • Re: Shared permissions vs. security
    ... Did you have to make the users power users or administrators only after you ... write/modify permissions to a folder if that is what they need to do their ... -- Verify that membership in the administrators group on all computers is ... updates at Windows Updates. ...
    (microsoft.public.win2000.security)
  • RE: Access Denied when running RSoP
    ... The launch and activation security descriptor for the COM Server application ... It contains Access Control Entries with permissions that are ... which is a part of the McAfee Common ... > Administrators - Full Control - This namespace and subnamespaces ...
    (microsoft.public.windows.server.sbs)
  • Re: Open With.. functionality doesnt fully work
    ... key's permissions are getting munged, ... > Small correction: ... > Ramesh, Microsoft MVP ... >> Administrators ...
    (microsoft.public.windowsxp.customize)
  • Re: Open With.. functionality doesnt fully work
    ... key's permissions are getting munged, ... > Small correction: ... > Ramesh, Microsoft MVP ... >> Administrators ...
    (microsoft.public.windowsxp.customize)