Re: W2k3 security template

From: Kevin Wheeler (kevin.l.wheeler_at_lmco.com)
Date: 06/04/04

  • Next message: Kevin Wheeler: "disabled administrator account" 
    Date: Fri, 4 Jun 2004 17:50:31 -0400

    Now, when I apply a template, for some reason something is disabling my
    admin account. After I apply my security template, before rebooting, I go
    and enable the admin account. I'm not sure what is causing this. This is
    the built-in administrator accout that I renamed.

    Kevin
    "Roger Abell" <mvpNOSpam@asu.edu> wrote in message
    news:#z6hjQrQEHA.2132@TK2MSFTNGP11.phx.gbl...
    > "Kevin Wheeler" <kevin.l.wheeler@lmco.com> wrote in message
    > news:%23F7hDhZQEHA.3264@TK2MSFTNGP10.phx.gbl...
    > > Roger,
    > >
    > > I'm not using GPOs. I'm applying the settings locally.
    > >
    > > Kevin
    >
    > ummm / ok. I think what I posted still
    > coverted that situation.
    > How are you now (weeks later)?
    >
    > --
    > Roger Abell
    > Microsoft MVP (Windows Server System: Security)
    > MCSE (W2k3,W2k,Nt4) MCDBA
    >
    > > "Roger Abell" <mvpNOSpam@asu.edu> wrote in message
    > > news:OTIVp9DNEHA.2780@TK2MSFTNGP09.phx.gbl...
    > > > Note that
    > > > http://support.microsoft.com/?id=278316
    > > > applies to W2k whereas your subject states
    > > > you have W2k3, in which case you should notice
    > > > http://support.microsoft.com/?id=816585
    > > > warns you not to reapply Setup security.inf
    > > >
    > > > What did you observe when trying procedure
    > > > of KB 278316 ? What was in what you called
    > > > "my security template" ?
    > > > If you only imported this to the local security
    > > > policy, not a GPO, and you have some candidates
    > > > as to what settings might be causing the issue, then
    > > > you could
    > > > 1. set a Deny of Full to Administrators on the folder
    > > > system32\GroupPolicy
    > > > 2. log off and then back in as an admin
    > > > 3. remove the Deny set in step 1
    > > > 4. try using the tools to edit existing local policy to
    > > > reverse the candidate problem changes
    > > > Of course, before trying this you would need to
    > > > reverse what you did when trying KB 278316
    > > > Also, this procedure would only help you if what
    > > > you now experience is because of a setting in the
    > > > "my security template", but not if secedit.sdb has
    > > > become corrupted.
    > > >
    > > > --
    > > > Roger Abell
    > > > Microsoft MVP (Windows Server System: Security)
    > > > MCSE (W2k3,W2k,Nt4) MCDBA
    > > > "Kevin Wheeler" <kevin.l.wheeler@lmco.com> wrote in message
    > > > news:OeDuZdDNEHA.2532@TK2MSFTNGP10.phx.gbl...
    > > > > After I apply my security template and try to check the local
    security
    > > > > policies using security and Configuration and Analysis tool, I get
    the
    > > > > followling error when trying to open the database. "An unknow error
    > > > occured
    > > > > when attempting to open the database." I now can't import the setup
    > > > > security template to get back to the default. Q278316 doesn't work
    > > > either.
    > > > > Is there some setting that I may have set that now isn't allowing me
    > > > access?
    > > > >
    > > > > Kevin
    > > > >
    > > > >
    > > >
    > > >
    > >
    > >
    >
    >

  • Next message: Kevin Wheeler: "disabled administrator account"

    Relevant Pages

    • Re: SIDs in Security Tab slow to resolve
      ... in the Local Policies / Security Options ... >>Is your XP client set to try to use digital signing ... >>Roger Abell ... >>> DNS, etc. - I think you could be onto something. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: NEED HELP HERE! Check XP Access Problems Below!
      ... >>Roger Abell ... >>Microsoft MVP (Windows Server System: Security) ... >>>>When attempt to create new accounts, ...
      (microsoft.public.windowsxp.security_admin)
    • RE: [in] Re: [Full-Disclosure] IE is just as safe as FireFox
      ... USER) and then let you configure the Admin account on start. ... > Please run some unix or at least read about the unix ... > default user of the MS computer is made an administrator. ... If they really did target security, ...
      (Full-Disclosure)
    • Re: HACKERS UNLEASH INDUSTRIAL SPY TROJAN...
      ... > Operating System: Linux ... Linux Security took the good ... > days before the patch was released but not the media. ... Roger Abell ...
      (microsoft.public.security)
    • Re: My (numerous) Windows Group Policy Issues
      ... I don't have an answer for your issue about the extra settings for SCE ... It sounds maybe like you applied the dc security template to your computer? ... For whatever reason this template and others that came with Windows 2003 ...
      (microsoft.public.windows.group_policy)