Re: Secure Boot Settings "on." Can't turn "off" on local system.

From: Bob T (anonymous_at_discussions.microsoft.com)
Date: 08/10/04 

Date: Tue, 10 Aug 2004 09:35:57 -0700

Steven,

Thanks for the good suggestions.

Unfortunately, nothing worked.

The reseting, had no effect.

The rebuild, seemed to do nothing.

And the last, gpedit.msc. Local Security Policy is a
subset of local Group Policy, just threw me back into the
local policy.

I could find no way at all to get to the local Global.

I wonder if it could have anything to do with my MMC
settings?

Anyway, after wasting several hours, I finally gave up and
went to my backup.

I just wish I knew what caused the problem & how to get to
that local Global policies.

I'm off now to check the registry and see where my
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\
SecurityBoot is set, 1 or 0?

Any more ideas will be appreciated.

Bob T

>-----Original Message-----
>When you change a Local Security Setting, either try
running [ secedit /refreshpolicy
>machine_policy/enforce ] at the command prompt to refresh
Local Security Policy or
>reboot the computer and see if that helps.
>
>http://support.microsoft.com/default.aspx?scid=kb;EN-
US;227302
>
>If you still have difficulty you might try to rebuild
your local security database as
>described in the link below,
>
>http://www.jsiinc.com/SUBG/TIP3200/rh3252.htm
>
>FYI there is a local Group Policy on your computer
available with gpedit.msc. Local
>Security Policy is a subset of local Group Policy. ---
Steve
>
>"Bob T" <anonymous@discussions.microsoft.com> wrote in
message
>news:31d601c47e73$30905280$a401280a@phx.gbl...
>> I cannot turn off the Secure Boot Settings for logon, on
>> my local machine.
>>
>> The system is in a local workgroup, with no domain
>> controler, no group manager, only local machines/group.
In
>> fact I've totally isolated it now, and removed all
shares.
>>
>> When I check Administrative Tools|Security
Settings|Local
>> Policies (no group policy available), the "Disable
>> CTRL+ALT+DEL requirement shows "disabled" for the "local
>> settings" & "effective settings."
>>
>> But, in CP |Users andPasswords|Advanced| the Secure Boot
>> Setting is grayed out.
>>
>> There is a check in the grayed box, but no way for me to
>> access it. It acts like there is a domain or group
policy
>> overide, or I don't have admin rights. But there is no
>> group policy since there is no PDC and I do have admin
>> rights.
>>
>> When I go back to the "Disable CTRL+ATL+DEL
requirement,"
>> and now select, "enable," I get: "disabled" for "local
>> setting" but, "Enabled" for "effective setting"! This
is
>> the only policy where there is a difference
between "local
>> setting" and "effective setting."
>>
>> Checking back at the CP Users, the Secure Boot Setting
is
>> still grayed out, but now, the check is gone.
>>
>> (The only thing I did prior to noticing this was to
>> download MDAC 2.8 from MS with its patch--I wouldn't
think
>> that would have anything to do with it, but who knows?)
>>
>> Ideas on how to reconcile these problems?
>>
>> 1) get the box un-grayed, so I have local admin rights
in
>> User and Passwords and can change the local settings.
>>
>> 2) get the "Disable Ctrl+Alt+Del requirement" to show
the
>> same policy, for local and effective; since there is no
>> group policy (at not one I can see) to cause the
override.
>>
>> I have full admin rights. Have tried coming in through
my
>> Admin group name, as well as Administrator. Neither,
made
>> a difference.
>> The CP|Users & Admin. Settings|Security Settings --are
>> either reading me as no admin rights, or global
overrides
>> are on, or both.
>>
>> Thanks,
>> Bob
>>
>>
>
>
>.
>

Relevant Pages

  • RE: Remote Assistance not working
    ... I have tried these settings you recommend with no results. ... I have yet to get the offer remote assistance to work when launched from the ... The Group Policy on the computer of the novice user must be configured ... Start the Microsoft Management Console Group Policy snap-in. ...
    (microsoft.public.windows.server.sbs)
  • Re: Parts of GPO not working.
    ... If your users use other browsers like firefox from an usb stick/drive or whatever medium your policy will not help. ... I have a request that all of those computers not have Internet ... The settings in this GPO can only apply to the following groups, ... Group Policy refresh interval for computers Enabled ...
    (microsoft.public.windows.server.active_directory)
  • Parts of GPO not working.
    ... I have a request that all of those computers not have Internet ... The settings in this GPO can only apply to the following groups, ... Group Policy refresh interval for computers Enabled ...
    (microsoft.public.windows.server.active_directory)
  • RE: Group Policy Connundrum - Stick with it, its confusing!!!
    ... Group Policy Connundrum - Stick with it, ... Small Business Server Internet Connection Firewall ... Import the current Content Ratings Settings: ...
    (Security-Basics)
  • Re: WMI missing security settings
    ... I believe the RSoP_x WMI settings will only account for the group ... security policy instead of the local policy. ... "Using SECEDIT to Force a Group Policy Refresh Immediately" ... Technically speaking, the items under "Security ...
    (microsoft.public.platformsdk.security)
Quantcast