Secure Boot Settings "on." Can't turn "off" on local system.

From: Bob T (anonymous_at_discussions.microsoft.com)
Date: 08/10/04


Date: Mon, 9 Aug 2004 19:56:51 -0700

I did make a discovery.
My reg file:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\
SecuryBoot
is set to "1."
Changing it to "0" gets rid of the popup screen but does
nothing to help with the problem as described.

Please still help.

Thanks, Bob T.

>-----Original Message-----
>I cannot turn off the Secure Boot Settings for logon, on
>my local machine.
>
>The system is in a local workgroup, with no domain
>controler, no group manager, only local machines/group.
In
>fact I've totally isolated it now, and removed all shares.
>
>When I check Administrative Tools|Security
Settings|Local
>Policies (no group policy available), the "Disable
>CTRL+ALT+DEL requirement shows "disabled" for the "local
>settings" & "effective settings."
>
>But, in CP |Users andPasswords|Advanced| the Secure Boot
>Setting is grayed out.
>
>There is a check in the grayed box, but no way for me to
>access it. It acts like there is a domain or group
policy
>overide, or I don't have admin rights. But there is no
>group policy since there is no PDC and I do have admin
>rights.
>
>When I go back to the "Disable CTRL+ATL+DEL requirement,"
>and now select, "enable," I get: "disabled" for "local
>setting" but, "Enabled" for "effective setting"! This
is
>the only policy where there is a difference
between "local
>setting" and "effective setting."
>
>Checking back at the CP Users, the Secure Boot Setting is
>still grayed out, but now, the check is gone.
>
>(The only thing I did prior to noticing this was to
>download MDAC 2.8 from MS with its patch--I wouldn't
think
>that would have anything to do with it, but who knows?)
>
>Ideas on how to reconcile these problems?
>
>1) get the box un-grayed, so I have local admin rights in
>User and Passwords and can change the local settings.
>
>2) get the "Disable Ctrl+Alt+Del requirement" to show the
>same policy, for local and effective; since there is no
>group policy (at not one I can see) to cause the override.
>
>I have full admin rights. Have tried coming in through
my
>Admin group name, as well as Administrator. Neither,
made
>a difference.
>The CP|Users & Admin. Settings|Security Settings --are
>either reading me as no admin rights, or global overrides
>are on, or both.
>
>Thanks,
>Bob
>
>
>.
>



Relevant Pages

  • Re: all domain user should have admin rights on single computer
    ... Create a new OU move the compouter to it, create a new GPO and use Restricted Groups from Computer configuration>Windows settings>Restricted Groups Here you can configure the settings for your needs. ... If you are ready with it, rightclick the policy name and check the securoty tab that apply Group policy is checked. ... I want that all the domains user should have the admin rights on a ... computer using the domain he can hve the complete admin rights. ...
    (microsoft.public.win2000.active_directory)
  • Secure Boot Settings "on." Cant turn "off" on local system.
    ... I cannot turn off the Secure Boot Settings for logon, ... Policies (no group policy available), ... or I don't have admin rights. ... setting" but, "Enabled" for "effective setting"! ...
    (microsoft.public.win2000.security)
  • Re: allow users to run application
    ... > you will find users denied access to the application folder in program ... > user computer use policy. ... The link below explains SRP more. ... >>I have a bunch of application that needs admin rights to run. ...
    (microsoft.public.win2000.group_policy)
  • Re: User accounts being deleted
    ... If someone has set a policy that is affecting local group membership, ... > just dont run if you don't have local admin rights. ... >>Hi Andy, ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Admin rights to local system via GPO
    ... I have verified once again the recommended GPO settings ... Microsoft Windows XP ... Group Policy was applied from: ... The group still does not have admin rights ...
    (microsoft.public.windows.group_policy)