Cannot edit "Log on as a service" and "Allow log on locally" policies on W2K3 server.

Discussion in 'Windows Server' started by SBS Rocker, Nov 13, 2007.

  1. SBS Rocker

    SBS Rocker Guest

    OK first off this is a repost of my issues. My apologies. I didn't get the
    answers I needed so I'm trying again. Thanks to those who offered their
    input. Here's my environment and what I'm trying to do here. Seems simple
    yet I cannot figure out why I can no longer do this.

    Windows SBS 2003 Server/Premium SP1/ISA 2004 SP2/MS Exchange 2003 SP2/Dual
    Windows 2003 Server Standard SP1

    I am installing a new version of a program on my W2K3 SP1 server and one of
    the requirements is to create a "local" user account and grant this account
    the right to "Log on as a service" on the local machine. However when I go
    into the Local Security Policy editor/Security settings/Local Policies/User
    Rights Assignment, I do not get the option to add or edit. It is greyed out.
    Funny thing is this policy and the "Allow log on locally" policy are the
    only two I cannot make a change to. These two policies both have different
    icons showing so I'm not sure what that indicates but am sure it has to do
    with why I cannot make any changes there. Now I'm also sure at some point
    and time I ws able to edit these policies according to the accounts that are
    there now. So what happened and does anyone have a good reason why or better
    yet how I can edit these policies? I have tried both ways using a domain
    admin account as well as the local admin account. Any ideas?
    SBS Rocker, Nov 13, 2007
    1. Advertisements

  2. SBS Rocker

    Chris M Guest

    The 'different' icons that you see are probably signifying that the
    settings are being inherited from a Group Policy.

    Run RSOP.msc on the server, drill down to those settings and it'll tell
    you which policy is applying to those settings.
    Chris M, Nov 14, 2007
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.