hidden hit counter
Help!

DOMAIN SECURITY GROUP POLICY - help 2

 
Post new topic   General Reply to Topic (not reply to a specific post)    Forums Home -> General Discussion RSS
Next:  MS-DOS and some 16 bit programs not working on SP..  
Author Message
JURBOP1
External


Since: Sep 15, 2004
Posts: 8



PostPosted: Thu Sep 16, 2004 4:56 am    Post subject: DOMAIN SECURITY GROUP POLICY
Archived from groups: microsoft>public>win2000>general (more info?)

I am preparing for the MCSE 2000 Security exam (70-214),
and one of the exercises I am to do is to Modify User
Rights. I run a single domain, and when I open up Active
Directory Users and Computers, right click the domain
name, click on Properties, and click on the Group Policy
tab to access the "Domain Security Group Policy", I am not
able to EDIT this policy (EDIT is grayed out). I click on
the policy Properties, then the Security tab, and I
receive the warning message "You only have permission to
view the current security information on Domain Security
Group Policy", and when the Security screen comes up all
of the user permission boxes and the change options (ADD,
REMOVE, APPLY) are grayed out. Authorized entries are:
Authenticated Users, Creator Owner, Domain Admins,
Enterprise Admins, and System. None of these entries has
FULL CONTROL access. I am logged on as Administrator, and
I'm a member of the Domain Admin group. Both Domain Admin
and System have Read, Write, and Create and Delete All
Child Objects permissions, but no Full Control. I've tried
various things to try and gain access which would allow me
to EDIT this policy, but have not been able to. What can I
do to obtain FULL CONTROL for this policy so I can EDIT
it. Thank you.
Back to top
Bikkelbink
External


Since: Sep 16, 2004
Posts: 12



PostPosted: Thu Sep 16, 2004 10:07 am    Post subject: RE: DOMAIN SECURITY GROUP POLICY [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Jurbop,

If you are member of domain admins, you should be able to take ownership.
On the group policy tab, click on properties, advanced and owner. Take
ownership, and after that you can edit the permissions and the group policy.

Good luck,

Bikkelbink.

"JURBOP" wrote:

 > I am preparing for the MCSE 2000 Security exam (70-214),
 > and one of the exercises I am to do is to Modify User
 > Rights. I run a single domain, and when I open up Active
 > Directory Users and Computers, right click the domain
 > name, click on Properties, and click on the Group Policy
 > tab to access the "Domain Security Group Policy", I am not
 > able to EDIT this policy (EDIT is grayed out). I click on
 > the policy Properties, then the Security tab, and I
 > receive the warning message "You only have permission to
 > view the current security information on Domain Security
 > Group Policy", and when the Security screen comes up all
 > of the user permission boxes and the change options (ADD,
 > REMOVE, APPLY) are grayed out. Authorized entries are:
 > Authenticated Users, Creator Owner, Domain Admins,
 > Enterprise Admins, and System. None of these entries has
 > FULL CONTROL access. I am logged on as Administrator, and
 > I'm a member of the Domain Admin group. Both Domain Admin
 > and System have Read, Write, and Create and Delete All
 > Child Objects permissions, but no Full Control. I've tried
 > various things to try and gain access which would allow me
 > to EDIT this policy, but have not been able to. What can I
 > do to obtain FULL CONTROL for this policy so I can EDIT
 > it. Thank you.
 >
 >
Back to top
Display posts from previous:   
Post new topic   General Reply to Topic (not reply to a specific post)    Forums Home -> General Discussion All times are: Eastern Time (US & Canada)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You can edit your posts in this forum
You can delete your posts in this forum
You can vote in polls in this forum