Re: User Rights in Setup Security Template

From: Rick (rnstreet@rogers.com)
Date: 06/07/02


From: "Rick" <rnstreet@rogers.com>
Date: Fri, 07 Jun 2002 11:53:35 GMT


Roger, thank you for the detailed explanation. I will do as you suggest and
re-analyze the settings.

Rick

"Roger Abell" <mvpNOSPAM@asu.edu> wrote in message
news:Ovf0c#eDCHA.1548@tkmsftngp02...
> Part of where you went wrong here was in applying the entire
> template in order to change some password policies.
> As a rule of thumb, always analyze with a template before
> applying and carefully review the differences to see what will
> be changed when applied.
>
> To change just a couple policies, either directly edit the current
> policy database via the Local Security Policies or a created
> Group Policy mmc, or else, in Security Configuration and Analysis
> tool create a new template (which will default to having nothing
> defined) and then make the few setting changes you wish and
> save this (incremental config template) and either import it into
> Group Policy or apply it from the Sec Config&Analysis mmc.
>
> I cannot advise on what to change as I am not certain what
> settings is impacting you. Perhaps if you would use the Sec
> Config & Analysis tool and load some of the other provided
> templates (using the clear upon load checkbox) and analyze your
> system (not apply, just analyze) you could pick up on likely
> differences. It is possible a reg permission rether than a right.
> Try analyzing against the defltwk.inf setup template.
>
> --
> Roger Abell
> MVP (Windows Platform) Associate Expert
> The Expert Zone - www.microsoft.com/windowsxp/expertzone
>
> "Rick" <rnstreet@rogers.com> wrote in message
> news:0nNL8.235113$t8_.142386@news01.bloor.is.net.cable.rogers.com...
> > I need your help. In trying to set up security on a P2P LAN with mixed
XP
> > and ME computers I selected one XP to work on. I modified the Setup
> Security
> > template for Passwords and applied it under mmc/Config & Analysis.
> >
> > There are 2 accounts - Administrator and Power User. The problem is that
> the
> > Power User can no longer create a shared folder. It asks that you run
the
> > Network Wizard - but the Power User doesn't have the right to do so.
Even
> > running the Wizard as the Admin and then logging onto the Power User
does
> > not fix the problem.
> >
> > What other settings should I be looking at to restore the ability to
> create
> > permanent shares?
> >
> > Thank you.
> > Rick
> >
> >
>
>



Relevant Pages

  • Re: security template file import
    ... i sort a little more comfortable going through the reimport of the security ... in here is a single file - GPTTMPL.INF that lists the securtiy settings (and ... when the DC as a group policy client downloads the GPO it sticks the ... > template outside of the GPO which you edit to contain all the security ...
    (microsoft.public.win2000.security)
  • Re: Group Policy Defaults
    ... > reapply the entire template. ... > between an import of security policy out of a template as compared ... The settings displayed in the Local Security Settings snapin now ...
    (microsoft.public.windowsxp.security_admin)
  • Re: USB disable policy template problem
    ... Uncheck the Only show policy settings that can be fully managed checkbox ... To add administrative template you need to select Action|Add/Remove ... serious treat for corporate security, the last pair is rarely used ... We decided to purchase USB & Ports ...
    (microsoft.public.windows.server.general)
  • RE: local security policy
    ... Yes I am using the security config and analysis snap-in to create the ... included in my exported template. ... Right now the only way that I know how to get those settings applied to ... Configuration and Analysis snap-in? ...
    (Focus-Microsoft)
  • Re: Security Config and Analysis issue
    ... I have member servers that we want to roll out a custom security template ... We created the template and verified the settings. ... when we re analyze we see a green check mark but when we go to the ... (not in the mmc), we still see power users and others that should have ...
    (microsoft.public.windows.server.security)