Cannot Access Local Computer Security Policy

[circulent]

I have a Win2003 server, and need to edit the Local Computer Security Policy. What's odd is that everything is greyed out. I cannot make any changes even though I'm logged in as the domain admin.

Thoughts?

 

[Roadki11]

Its greyed out because its inheriting policies from higher level GPs, either the Domain Policy or the the Domain Controllers Policy probably.

RoadKi11

 

[circulent]

That'd odd. I combed thru the GPO, couldn;t find anything, reinstalled the Group Policy Management console thinking it would reset all policies, but still the local policies are in effect. Thoughts?

 

[circulent]

One more thing:

If I access the Local Computer Security Policy (gpedit.msc), these are the folder which are locked out (You can see a little lock icon next to the folder):

- Computer Config > Security Settings > Account Policies
- Computer Config > Security Settings > Local Policies

What's odd is that none of the GPO poclies even show these 2 folders at all.

Thoughts?

 

[tfg13]

Have you confirmed that there are no GPO's being applied? Run RSOP.msc, and look through what is being pushed to the server. Also, and I hope you are not using the domain GPO as the only policy with edits (only password and account info should be changed in the domain policy).

 

[circulent]

There were the two standard domain GPO's. Somewhere they were locking the ability to edit the local computer security policies. I couldn't find anything, but once I disabled both GPO's all was fine.