Home All Groups Group Topic Archive Search About

I cannot alter any settings in the *local* Group Policy Editor

Author
10 Mar 2006 4:01 PM
Spin
I am the local administrator of a server.  I cannot alter any settings in
the *local* Group Policy Editor.  How can I remediate this?

--
Spin

Author
10 Mar 2006 8:45 PM
one3cap
just wondering how do you know you cannot alter any settings in
Show quoteHide quote
> the *local* Group Policy Editor? are the options greyed or dimmed out, or can you alter the settings but nothing is retained? Or do you not even have access in there. Local administrator? Is this computer joined to a domain? Maybe a GPO only allowing domain administrator access to gpedit.msc? Just throwing a few things out there.

"Spin" wrote:

> I am the local administrator of a server.  I cannot alter any settings in
> the *local* Group Policy Editor.  How can I remediate this?
>
> --
> Spin
>
>
>
Author
11 Mar 2006 1:00 PM
Paul Williams [MVP]
When you say cannot alter, do you mean you actually can't modify the GPT
(via GPEDIT.MSC) or do you mean settings don't take effect?  The latter
means that a domain policy is overriding the local policies - remember
processing occurs in the order Local, Site, Domain, OU.

If you can't edit settings, you should check permissions on
%systemroot%\system32\grouppolicy

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net