Re: Can't Modify Local Security Setting - Windows XP SP 2

Steven, I have talked with my domain administrator and he said that
they are going to remove me from the domain. However he said that
removing me from the domain will *not* remove the Group Policy
restrictions. He said that it will be up to me to change any policies
locally on my machine. The way that he explained it is that if I just
create a local account on my PC and always log in to that local account
instead of logging on to my domain account then that should fix my
problem because the system will not refresh the domain policies. So
his instructions were for me to log on to a local administrator level
account on my PC. Then I should be able to change the local policies
to whatever I want. As long as I don't ever log on to my domain
account then the policies will never get switched back. The problem is
that even when I log on to a local account (which has administrative
rights) I don't have the ability to modify any of the User Rights
Assignments. He was kind of baffled as to why that account didn't have
the ability to modify the User Rights Assignments.

One thing that didn't make sense to me was that they said that they
were going to remove my PC from the domain remotely. I guess on the
domain controller they were going to remove my PC from the domain. But
I would assume that I would have to remove my PC from the domain also
on my computer, wouldn't I and change it to a workgroup? Currently
when I try to do that I don't have permission to do that.

I know I have a lot of questions but I am a bit confused now and very
frustrated with the domain security policies. It is a huge government
Active Directory and for right now they don't have any good way of
handling developers who need more permissions on their own PCs. Thanks
in advance for any help you can give me.

Corey

.

Relevant Pages

  • Re: Installing VB6 SP5 in Vista
    ... UAC from asking whether you *really* want to run VB6.EXE every time you fire it ... If you are running as the actual 'administrator' account and the app is configured to always run as administrator then by default you don't get prompted. ... You can also change policies so that other administrator accounts don't get prompted but it's for all apps. ...
    (microsoft.public.vb.general.discussion)
  • Re: Denied Access to Encrypted Files After You Change Your Password
    ... The user used his local account with local administrator ... rights to encrypt the files, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Fax Calling Card
    ... As you figured it out in the kb article, " Add a local account name with ... administrator rights" ... > Calling card settings are part of the per-user settings. ...
    (microsoft.public.win2000.fax)
  • Re: Run as Administrator on a limited account
    ... > I have a couple of limited accounts besides my administrator account ... > I have a program that requires administrator privileges to run, ... users run while disregarding security policies. ...
    (microsoft.public.windowsxp.general)
  • Re: Remote access to AD users and computers
    ... administrator [even a local account], you should be able to use Adminpak on your ... Since you have a VPN, ... and be sure to use complex passwords for the administrator ...
    (microsoft.public.win2000.group_policy)
Quantcast