Help with Effective Policy Settings

David

Distinguished
Apr 1, 2004
2,039
0
19,780
Archived from groups: microsoft.public.win2000.group_policy (More info?)

HI, I have a member server on a Windows 2000 domain. When I open up the
local policy on the member server, the effective policy setting for two
domain accounts on "Act as part of the OS" is grayed out and unchecked. I
need to get these boxes checked.

On the DC, I added the users and it is correct there. I have made these
same changes for "Log on as a Service" and that accepted the effective
policy settings.

Thanks for any help here.

David
 
Archived from groups: microsoft.public.win2000.group_policy (More info?)

That means that Group/security policy is being applied at a higher priority
level such as the domain/OU level. You can use the support tool gpresult to
see what computer configuration policies are being applied to that server.
One of those policies [other than local] has that user right defined. You
might want to create an OU for that server, move it into the OU, and create
a Group Policy with that user right configured to what you need for that
server. --- Steve


"david" <dross@si.rr.com> wrote in message
news:u4M8vjyIFHA.2852@TK2MSFTNGP09.phx.gbl...
> HI, I have a member server on a Windows 2000 domain. When I open up the
> local policy on the member server, the effective policy setting for two
> domain accounts on "Act as part of the OS" is grayed out and unchecked.
> I need to get these boxes checked.
>
> On the DC, I added the users and it is correct there. I have made these
> same changes for "Log on as a Service" and that accepted the effective
> policy settings.
>
> Thanks for any help here.
>
> David
>
 
Archived from groups: microsoft.public.win2000.group_policy (More info?)

Thanks for your help Steven. The new OU solution worked fine.

Thanks
"Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
news:uDzbuV5IFHA.2356@TK2MSFTNGP12.phx.gbl...
> That means that Group/security policy is being applied at a higher
> priority level such as the domain/OU level. You can use the support tool
> gpresult to see what computer configuration policies are being applied to
> that server. One of those policies [other than local] has that user right
> defined. You might want to create an OU for that server, move it into the
> OU, and create a Group Policy with that user right configured to what you
> need for that server. --- Steve
>
>
> "david" <dross@si.rr.com> wrote in message
> news:u4M8vjyIFHA.2852@TK2MSFTNGP09.phx.gbl...
>> HI, I have a member server on a Windows 2000 domain. When I open up the
>> local policy on the member server, the effective policy setting for two
>> domain accounts on "Act as part of the OS" is grayed out and unchecked. I
>> need to get these boxes checked.
>>
>> On the DC, I added the users and it is correct there. I have made these
>> same changes for "Log on as a Service" and that accepted the effective
>> policy settings.
>>
>> Thanks for any help here.
>>
>> David
>>
>
>