Domain Security Group Policy

From: JURBOP (anonymous_at_discussions.microsoft.com)
Date: 09/19/04 

Date: Sun, 19 Sep 2004 11:46:09 -0700

I am preparing for the MCSE 2000 Security exam (70-214),
and one of the exercises I am to do is to Modify User
Rights. I run a single domain, and when I open up Active
Directory Users and Computers, right click the domain
name, click on Properties, and click on the Group Policy
tab to access the "Domain Security Group Policy", I am not
able to EDIT this policy (EDIT is grayed out). I click on
the policy Properties, then the Security tab, and I
receive the warning message "You only have permission to
view the current security information on Domain Security
Group Policy", and when the Security screen comes up all
of the user permission boxes and the change options (ADD,
REMOVE, APPLY) are grayed out. Authorized entries are:
Authenticated Users, Creator Owner, Domain Admins,
Enterprise Admins, and System. None of these entries has
FULL CONTROL access. I am logged on as Administrator, and
I'm a member of the Domain Admin group. Both Domain Admin
and System have Read, Write, and Create and Delete All
Child Objects permissions, but no Full Control. I've tried
various things to try and gain access which would allow me
to EDIT this policy, but have not been able to. What can I
do to obtain FULL CONTROL for this policy so I can EDIT
it. Or am I not supposed to be able to Edit this policy
from the Domain Properties area? Should I be doing this
from the Security Configuration and Analysis snap-in tool
from the MMC?? In the exercise I'm trying to complete, the
Microsoft Press book I'm using states to go through the
Domain Properties, click the Group Policies tab, then
double click the Domain Security Group Policy which would
bring up the EDIT screen, which I'm not able to do. Thank
you.

Relevant Pages

  • Re: lockdown desktop without Group Policy
    ... Group Policy settings. ... Logon as an administrator ... Right-click on the GroupPolicy folder and Properties - Security ... and enter "Edit Group Policy" for the name ...
    (microsoft.public.windows.terminal_services)
  • Re: Routing and Remote Access
    ... If it still does not work, it could be a Local Group Policy ... > far as security policy if you are having problem accessing a Remote Access ... > server while logged onto it you may be lacking privileges. ...
    (microsoft.public.windows.server.security)
  • Fwd: Oh Dear, Where to start?!
    ... It seems to me you need two things: an organizational policy, ... finish college and break into the real world of computer security. ... experience in the field of network security and policy ... updates, driver updates, and recommended updates. ...
    (Security-Basics)
  • Domain Security Group Policy
    ... I am preparing for the MCSE 2000 Security exam, ... name, click on Properties, and click on the Group Policy ... able to EDIT this policy. ...
    (microsoft.public.win2000.group_policy)
  • RE: [fw-wiz] PIX vs Checkpoint vs Sonicwall vs Netscreen - comme nts?
    ... All NetScreen appliances rely on custom-designed ASICs (Application ... Specific Integrated Circuits) for security policy enforcement. ... supports a finite number of "rules" or "policies". ...
    (Firewall-Wizards)