Re: Effective Setting Greyed Out and Cannot Invoke Settings in 'Log on locally'
From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: Fri, 17 Sep 2004 23:49:46 GMT
If this is a domain controller it has to be configured in Domain Controller Security
Policy. You can also use the gpresult support tool on a domain computer to see what
"computer" configuration GPO's are applied to that computer [not user]. A GPO from
anywhere other than local could have that policy enabled for computer
onfiguration. --- Steve
"Zack Schneeberger" <email@example.com> wrote in message
>I have spent 5 hours trying to figure out this problem. We have a
> server that is part of the Domain and is running Windows 2000 Server.
> I am trying to modify the 'Log on locally' policy setting.
> After I click on 'Log on locally', the 'Effective Policy Setting' for
> the groups that I want to log on locally is greyed out and unchecked.
> So that leads me to the conclusion that a Domain Level Policy is being
> pushed down right?! Well wrong! I have scanned 'Domain Security
> Policy' and the 'Default Domain Policy' and there is no reference to
> 'Deny Local Logon' to any group which is maybe why the 'Effective
> Policy Setting' is greyed out and unchecked for certain groups in the
> 'Log on locally' policy setting.
> Why is the 'Effective Policy Setting' greyed out and unchecked for
> groups in my 'Log on locally' policy setting? It apears that that is
> nothing denying their existance locally.
> Thanks in Advance,