Re: User Rights in Setup Security Template

From: Roger Abell (mvpNOSPAM@asu.edu)
Date: 06/07/02 

From: "Roger Abell" <mvpNOSPAM@asu.edu>
Date: Fri, 7 Jun 2002 00:05:51 -0700

Part of where you went wrong here was in applying the entire
template in order to change some password policies.
As a rule of thumb, always analyze with a template before
applying and carefully review the differences to see what will
be changed when applied.

To change just a couple policies, either directly edit the current
policy database via the Local Security Policies or a created
Group Policy mmc, or else, in Security Configuration and Analysis
tool create a new template (which will default to having nothing
defined) and then make the few setting changes you wish and
save this (incremental config template) and either import it into
Group Policy or apply it from the Sec Config&Analysis mmc.

I cannot advise on what to change as I am not certain what
settings is impacting you. Perhaps if you would use the Sec
Config & Analysis tool and load some of the other provided
templates (using the clear upon load checkbox) and analyze your
system (not apply, just analyze) you could pick up on likely
differences. It is possible a reg permission rether than a right.
Try analyzing against the defltwk.inf setup template. 

--
Roger Abell
MVP (Windows Platform)  Associate Expert
The Expert Zone - www.microsoft.com/windowsxp/expertzone
"Rick" <rnstreet@rogers.com> wrote in message
news:0nNL8.235113$t8_.142386@news01.bloor.is.net.cable.rogers.com...
> I need your help. In trying to set up security on a P2P LAN with mixed XP
> and ME computers I selected one XP to work on. I modified the Setup
Security
> template for Passwords and applied it under mmc/Config & Analysis.
>
> There are 2 accounts - Administrator and Power User. The problem is that
the
> Power User can no longer create a shared folder. It asks that you run the
> Network Wizard - but the Power User doesn't have the right to do so. Even
> running the Wizard as the Admin and then logging onto the Power User does
> not fix the problem.
>
> What other settings should I be looking at to restore the ability to
create
> permanent shares?
>
> Thank you.
> Rick
>
>

Relevant Pages

  • Re: output buffering but content still escapes?
    ... Lawrence Krubner wrote: ... I'd like to make some changes to stuff in that template before it goes to the screen. ... // to every link, so when people click on links, and we analyze ...
    (comp.lang.php)
  • output buffering but content still escapes?
    ... I'd like to make some changes to stuff in that template before it goes to the screen. ... setcookie ("storedFrontPageFileName", $storedFrontPageFileName, ... // to every link, so when people click on links, and we analyze ...
    (comp.lang.php)
  • survey template
    ... I am looking for a template to analyze results from a survey with 5-part ...
    (microsoft.public.access.tablesdbdesign)
  • Re: Is it possible to make changes to a group policy through script
    ... a template and apply it. ... computer startup and logon" on all Windows XP machines in the network, ... make XP apply group policies at logon time and alter group memberships ...
    (microsoft.public.windows.group_policy)
  • secpol.msc corrupt?
    ... While trying to confirm certain necessary permissions for a service account ... "Windows cannot read template information". ... Settings objects appear to be ok.(meaning their policies are listed) ...
    (microsoft.public.security)