Re: W2k3 security template

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 06/05/04

  • Next message: Roger Abell: "Re: disabled administrator account" 
    Date: Fri, 4 Jun 2004 23:06:30 -0700

    Hi Kevin,

    continuing in the new thread you have started. 

    -- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Kevin Wheeler" <kevin.l.wheeler@lmco.com> wrote in message
news:OxxvY3nSEHA.1472@TK2MSFTNGP09.phx.gbl...
> Now, when I apply a template, for some reason something is disabling my
> admin account.  After I apply my security template, before rebooting, I go
> and enable the admin account.  I'm not sure what is causing this. This is
> the built-in administrator accout that I renamed.
>
> Kevin
> "Roger Abell" <mvpNOSpam@asu.edu> wrote in message
> news:#z6hjQrQEHA.2132@TK2MSFTNGP11.phx.gbl...
> > "Kevin Wheeler" <kevin.l.wheeler@lmco.com> wrote in message
> > news:%23F7hDhZQEHA.3264@TK2MSFTNGP10.phx.gbl...
> > > Roger,
> > >
> > > I'm not using GPOs.  I'm applying the settings locally.
> > >
> > > Kevin
> >
> > ummm   /  ok.  I think what I posted still
> > coverted that situation.
> > How are you now (weeks later)?
> >
> > --
> > Roger Abell
> > Microsoft MVP (Windows Server System: Security)
> > MCSE (W2k3,W2k,Nt4)  MCDBA
> >
> > > "Roger Abell" <mvpNOSpam@asu.edu> wrote in message
> > > news:OTIVp9DNEHA.2780@TK2MSFTNGP09.phx.gbl...
> > > > Note that
> > > > http://support.microsoft.com/?id=278316
> > > > applies to W2k whereas your subject states
> > > > you have W2k3, in which case you should notice
> > > > http://support.microsoft.com/?id=816585
> > > > warns you not to reapply Setup security.inf
> > > >
> > > > What did you observe when trying procedure
> > > > of KB 278316 ?  What was in what you called
> > > > "my security template" ?
> > > > If you only imported this to the local security
> > > > policy, not a GPO, and you have some candidates
> > > > as to what settings might be causing the issue, then
> > > > you could
> > > > 1. set a Deny of Full to Administrators on the folder
> > > >     system32\GroupPolicy
> > > > 2. log off and then back in as an admin
> > > > 3. remove the Deny set in step 1
> > > > 4. try using the tools to edit existing local policy to
> > > >     reverse the candidate problem changes
> > > > Of course, before trying this you would need to
> > > > reverse what you did when trying KB 278316
> > > > Also, this procedure would only help you if what
> > > > you now experience is because of a setting in the
> > > > "my security template", but not if secedit.sdb has
> > > > become corrupted.
> > > >
> > > > --
> > > > Roger Abell
> > > > Microsoft MVP (Windows Server System: Security)
> > > > MCSE (W2k3,W2k,Nt4)  MCDBA
> > > > "Kevin Wheeler" <kevin.l.wheeler@lmco.com> wrote in message
> > > > news:OeDuZdDNEHA.2532@TK2MSFTNGP10.phx.gbl...
> > > > > After I apply my security template and try to check the local
> security
> > > > > policies using security and Configuration and Analysis tool, I get
> the
> > > > > followling error when trying to open the database. "An unknow
error
> > > > occured
> > > > > when attempting to open the database."  I now can't import the
setup
> > > > > security template to get back to the default.  Q278316 doesn't
work
> > > > either.
> > > > > Is there some setting that I may have set that now isn't allowing
me
> > > > access?
> > > > >
> > > > > Kevin
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>
  • Next message: Roger Abell: "Re: disabled administrator account"

    Relevant Pages