Local Security Policy settings keep changing back to defaults

[jamescpp]

I have several Windows 2003 stand alone servers. (no AD or Domain). I make several settings changes in Administrative tools/Local Security Policy:
A)User Rights Assessment
Change the system time - Administrators, LOCAL_SERVICE (remove Power Users)
Shut down this system - Administrators, Backup Operators (remove Power Users, Users)
B)Security Options
Network access: Sharing and security model for local accounts: - Classic - local user authenticate as themselves (change from Guest to Classic)

For some reason these keep reverting back to defaults. There's no automated policies running.

How do you get these settings to "stick" indefinitely?

Thanks,
James

 

[ITPangaeaArchitect]

when you make the policy changes and run gpupdate /force, do you get a 1704 event from SceCli, or do you get a UserEnv error?

-Brandon Wilson
MCSE:Security00/03
MCSA:Messaging00
MCSA:Security03
A+

 

[jamescpp]

When I went in to run this command all of my setting were reverted to default. I changed them again and ran the command. I get this when I run it. No errors in Event Log. After running command none of the settings changed.

C:\Documents and Settings\Administrator>gpupdate /force
Refreshing Policy...

User Policy Refresh has completed.
Computer Policy Refresh has completed.

To check for errors in policy processing, review the event log.

Thanks,
James

 

[ITPangaeaArchitect]

ok sounds like you may have a corrupt sdb.

follow kb313222, then set your settings again, gpupdate /force and see if they stick

-Brandon Wilson
MCSE:Security00/03
MCSA:Messaging00
MCSA:Security03
A+