Re: Policy Removal Qustion.

That was it Steve. I nuked the key and now all is well.

In reply to your previous post - yup we got this error when using the GUI.
Nope, no AntiSpyWare etc. The only tool we use is McAfee AntiVirus. I didn't
see anything out of the ordinary with Regmon and Filemon. I did a Side by
Side comparison with my laptop and everything looked fine.

Thans for the assist.

Wiley.

"Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:a7mdnSHIVYwT5DDZnZ2dnUVZ_vmdnZ2d@xxxxxxxxxxxxxx
The other thing I would check is too use regedit and go to
HKCU\software\policies\Microsoft\Windows and see if there is a key under
that for network connections. If there is right click and select delete to
delete it and reboot the computer to see if that helps. Sometimes computer
protection packages or even spyware/malware will create those keys to
prevent the user from accessing those networking settings through the
--- Steve


"Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:tNKdnRWEt5oW9TDZnZ2dnUVZ_t2dnZ2d@xxxxxxxxxxxxxx
How is he trying to change settings when he gets this message - through
Control Panel network connections?? Does he have any "protection"
software enabled such as for spyware or viruses that have been configured
to monitor and lock down the system? Has he tried using Safe Mode with
networking to see if it happens? Interesting that he can do it through
the registry but not with the other interface. You or he could try
running filemon and regmon [free from SysInternals] to see if you can
find any access denied entries in the logs for those programs that happen
at the time when he tries to change settings and then make appropriate
changes to access control list. When using filemon/regmon use the
filter/highlight setting under options and enter access denied for
filemon so that you can quickly spot those entries as the log can grow
very fast. Also check the logs via Event Viewer to see if anything shows
up at the time he is denied access such as a Software Restriction Policy
entry in the application log. Sometimes if nothing seems to help I use
secedit to reset file and/or registry permissions back to default as
described in the link below but be sure to append the command with /areas
filestore regkeys so that only those security settings are reset. I would
also use the command net user username using his real username of course
to check his group membership as possibly he is a member of a group that
has deny permissions somewhere. Normally a user that is also an
administrator will only be member of administrators and users. Your
suggestion of uninstalling the nic is a good one particularly if his
access seems to be normal everywhere other than to the network settings.
It may also be helpful to try and use netsh to reset tcp/ip as in netsh
int ip reset [log_file_name]. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;EN-US;313222
http://support.microsoft.com/kb/299357



"Wiley Coyote - N2K" <mits_mvp@xxxxxxxx> wrote in message
news:u%23vBZ$SoGHA.4648@xxxxxxxxxxxxxxxxxxxxxxx
Hey Steve. Thanks for the pointers. I should have mentioned in my post
that I did run rsop.msc and gpedit.msc and found nothing. I walked my
guy through both process and compared his settings to mine. They were
identical.

One of my thoughts is to remove the NIC (and the INF file[s]) , reboot
and re-install. I did this once before and for some reason it worked -
perhaps a GLITCHED Registry or something.

Also, I didn't mean to suggest that he was logging onto a Domain.
Indeed, it is a Local Account - sorry 'bout that.

In any case, any other ideas?

Wiley.

"Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:GvWdnenPQeqH1jDZnZ2dnUVZ_oadnZ2d@xxxxxxxxxxxxxx
If he is logged on as the local administrator that is not a domain user
account then it can not be domain level Group Policy restrictions.
Anyway I would have him run rsop.msc on his computer while logged on as
that user account to see if any Group Policy restrictions are enabled.
Look under user configuration/administrative templates/network/network
connections to see if any settings are enabled or disabled that may be
giving him the problem. If not use gpedit.msc and try
enabling/disabling settings as the case may be to try and reverse any
apparent rictions. --- Steve


"Wiley Coyote - N2K" <mits_mvp@xxxxxxxx> wrote in message
news:eS4LRuRoGHA.4340@xxxxxxxxxxxxxxxxxxxxxxx
G'day to all.

A Client of mine all of a sudden has policies on his machine (XP) that
says "Insufficient Permissions..." when he tries to change Network
Settings.

He is logged on as ADMINISTRATOR (the real guy, not a member of admin
acount). The only way we could change the settings (IP address) was to
tweak the registry. Obviously, this is not the way to do things, but
it worked interimly.

I am suspecting that it is a policy, but noone (in the least this
fellow) would have done such a thing. The only wierd thing is that
they put a Win2K3 server on the LAN. It is is it's own domain and on a
different subnet. But I don't see how this would affect him?

Does anyone know what is happening, or why an Admin has incorrect
rights. I've scowered Google and the MS Tech sites, to no avail.

Thanks in advance.

Wiley N2K












.

Relevant Pages

  • Re: Xp home netoworking woes
    ... >> I applaud your curiosity and caution, Steve. ... >> network user should make these changes to network or registry ... >> settings indiscriminately, even when there are network problems. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Xp home netoworking woes
    ... >> I applaud your curiosity and caution, Steve. ... >> network user should make these changes to network or registry ... >> settings indiscriminately, even when there are network problems. ... >go back in to regedit and add the keys back and delete the keys added, ...
    (microsoft.public.windowsxp.network_web)
  • Re: AT&T Tilt continues the tradition of crappy Windows Mobile phones; what phone can I buy ins
    ... reason), give the XDA-Devs cooked ROM's a try. ... the iPhone is ruled out because tethering my ... the network through my phone, EDGE-only is simply not an option. ... settings was invalid because of a corrupt ring tone, ...
    (microsoft.public.pocketpc)
  • Re: AT&T Tilt continues the tradition of crappy Windows Mobile phones; what phone can I buy inst
    ... PalmOS and Blackberry are both ruled out because none of the AT&T ... the network through my phone, EDGE-only is simply not an option. ... settings was invalid because of a corrupt ring tone, ...
    (comp.sys.handhelds)
  • RE: Windows Media Player 11 not opening files through email
    ... And the Media Player will play news broadcasts and a radio station I ... I did not change my settings in any way other than the updates. ... are not connected to a local area network or to the Internet. ... protocols in the Player are not enabled. ...
    (microsoft.public.windowsxp.help_and_support)