Re: Local Audit Policy - Administrator cannot change?

From: James Garrison (jhg_at_athensgroup.com)
Date: 11/23/05 

Date: Wed, 23 Nov 2005 15:39:18 -0600

Steven L Umbach wrote:
> It sounds like you have a domain /OU level GPO that is overriding the Local
> Security Policy settings you want to change and that is why they are grayed
> out. For domain controllers use Domain Controller Security Policy to set
> audit policy. If not a domain controller run rsop.msc on that Windows 2003
> server to see what GPO is applying those audit settings and then configure
> them in that GPO to suit your needs or create a new GPO that is "closer" to
> the Windows 2003 server and configure your settings there. Group Policy is
> applied in this order where the last GPO applied wins if the same setting is
> defined in multiple GPOs - local>site>domain>OU>child OU. --- Steve

Aha - that's the piece I was missing.

RSOP shows that the Default Domain Policy is indeed the Source GPO.
So, I added a GPOE instance in MSC for the Default Domain Policy and
set the desired policy there. Should that automatically propagate to
the server in question (which is not a DC)? I refreshed RSOP and it's
not showing up there after 20 minutes or so. Do I need to reboot? I
tried logging off and back on but that didn't appear to have any effect.

Relevant Pages

  • Re: GPO not picking up computer settings
    ... to the domain container with the password/account settings you want. ... for password/account settings and from what GPO. ... buying any of the highly rated AD or Group Policy books you see at Amazon or ... I have changed all the passwords back to what they were so users are now ...
    (microsoft.public.windows.server.security)
  • Re: Local GPO refreshes outside of refresh interval
    ... I looked through my GPO's Windows Settings section ... > Some policies, including IE policies, have a checkbox that defines if this ... > it should apply EVEN if the value defined in GPO did not change since the ... we are talking about one particular policy: ...
    (microsoft.public.windows.group_policy)
  • Re: scripted logon
    ... Why can't you launch all the scripts from a Group Policy based Logon script. ... Here's the policy settings (I sure hope word wrap doesn't mess it up too ... Windows Components/Windows Installer ...
    (microsoft.public.windows.terminal_services)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... Server Security and Auditing Policy ... This list only includes links in the domain of the GPO. ... The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... > Server Security and Auditing Policy ... > This list only includes links in the domain of the GPO. ... > The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)