Re: Secure Boot Settings "on." Can't turn "off" on local system.

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 08/10/04


Date: Tue, 10 Aug 2004 03:50:52 GMT

When you change a Local Security Setting, either try running [ secedit /refreshpolicy
machine_policy/enforce ] at the command prompt to refresh Local Security Policy or
reboot the computer and see if that helps.

http://support.microsoft.com/default.aspx?scid=kb;EN-US;227302

If you still have difficulty you might try to rebuild your local security database as
described in the link below,

http://www.jsiinc.com/SUBG/TIP3200/rh3252.htm

FYI there is a local Group Policy on your computer available with gpedit.msc. Local
Security Policy is a subset of local Group Policy. --- Steve

"Bob T" <anonymous@discussions.microsoft.com> wrote in message
news:31d601c47e73$30905280$a401280a@phx.gbl...
> I cannot turn off the Secure Boot Settings for logon, on
> my local machine.
>
> The system is in a local workgroup, with no domain
> controler, no group manager, only local machines/group. In
> fact I've totally isolated it now, and removed all shares.
>
> When I check Administrative Tools|Security Settings|Local
> Policies (no group policy available), the "Disable
> CTRL+ALT+DEL requirement shows "disabled" for the "local
> settings" & "effective settings."
>
> But, in CP |Users andPasswords|Advanced| the Secure Boot
> Setting is grayed out.
>
> There is a check in the grayed box, but no way for me to
> access it. It acts like there is a domain or group policy
> overide, or I don't have admin rights. But there is no
> group policy since there is no PDC and I do have admin
> rights.
>
> When I go back to the "Disable CTRL+ATL+DEL requirement,"
> and now select, "enable," I get: "disabled" for "local
> setting" but, "Enabled" for "effective setting"! This is
> the only policy where there is a difference between "local
> setting" and "effective setting."
>
> Checking back at the CP Users, the Secure Boot Setting is
> still grayed out, but now, the check is gone.
>
> (The only thing I did prior to noticing this was to
> download MDAC 2.8 from MS with its patch--I wouldn't think
> that would have anything to do with it, but who knows?)
>
> Ideas on how to reconcile these problems?
>
> 1) get the box un-grayed, so I have local admin rights in
> User and Passwords and can change the local settings.
>
> 2) get the "Disable Ctrl+Alt+Del requirement" to show the
> same policy, for local and effective; since there is no
> group policy (at not one I can see) to cause the override.
>
> I have full admin rights. Have tried coming in through my
> Admin group name, as well as Administrator. Neither, made
> a difference.
> The CP|Users & Admin. Settings|Security Settings --are
> either reading me as no admin rights, or global overrides
> are on, or both.
>
> Thanks,
> Bob
>
>



Relevant Pages

  • Re: XP in 2000 Domain
    ... The Local Security is not controlled by the ADM files. ... You might consider installing Group Policy ...
    (microsoft.public.windows.group_policy)
  • Re: Intermittant GPO failure to apply
    ... If you have backup your group policy before, you can restore it from the ... 244474 How to force Kerberos to use TCP instead of UDP in Windows Server ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Set GPO for specific user group
    ... Click on the domain name in Group Policy Management, select the GPO and then click the arrow to the left to move it to the top of the list ... Filtering: Denied ...
    (microsoft.public.windows.server.sbs)
  • RE: Remote Assistance not working
    ... I have tried these settings you recommend with no results. ... I have yet to get the offer remote assistance to work when launched from the ... The Group Policy on the computer of the novice user must be configured ... Start the Microsoft Management Console Group Policy snap-in. ...
    (microsoft.public.windows.server.sbs)
  • RE: Group Policy Connundrum - Stick with it, its confusing!!!
    ... Group Policy Connundrum - Stick with it, ... Small Business Server Internet Connection Firewall ... Import the current Content Ratings Settings: ...
    (Security-Basics)