Cannot change entries for "Access This Computer From The Network"

[Guest Polaris431]

I have little knowledge of Windows 2003 or Active Directory so please

bare with me.

 

I have a Windows 2003 server connected on a LAN that also has a Domain

Controller. Something happened a few days ago (don't know what) and it

is no longer possible to access the server over a network. The guy who

owns the system played around with Active Directory on the Domain

Controller to see if he could get things working again but to no

avail.

 

After digging around, I discovered that there is a local policy on the

server that is called "Access This Computer From The Network". It has

only two entries in the list and neither of these are the defaults. In

fact, not even administrators are part of the list. This appears to be

the reason why I cannot access the computer over the network. Actually

I can if I use Remote Desktop but not when I use accounts in IIS for

anonymous logon or Windows authentication. The server is hosting IIS.

 

I believe the problem would be resolved if I could simply add

administrators and other accounts to the "Access This Computer From

The Network" setting. The problem is, is that the "Add User or Group"

button is greyed out (disabled) and so it's not possible to add the

accounts.

 

Why is this button disabled and how can I enable it? Is there

something on the Domain Controller that needs to be setup to make this

happen? Are some changes needed on the Domain Controller that need to

be replicated back to my server? I am really green here, so please

excuse my lack of knowledge.

 

Thanks for your help

Johann

[Guest Dragos CAMARA]

RE: Cannot change entries for "Access This Computer From The Network"

 

hi,

you have to check the GPO's that are applied to the server and make the

changes there on that. They are greyed because are set on a GPO on domain.

--

Dragos CAMARA

MCSA Windows 2003 server

 

 

"Polaris431" wrote:

> I have little knowledge of Windows 2003 or Active Directory so please

> bare with me.

>

> I have a Windows 2003 server connected on a LAN that also has a Domain

> Controller. Something happened a few days ago (don't know what) and it

> is no longer possible to access the server over a network. The guy who

> owns the system played around with Active Directory on the Domain

> Controller to see if he could get things working again but to no

> avail.

>

> After digging around, I discovered that there is a local policy on the

> server that is called "Access This Computer From The Network". It has

> only two entries in the list and neither of these are the defaults. In

> fact, not even administrators are part of the list. This appears to be

> the reason why I cannot access the computer over the network. Actually

> I can if I use Remote Desktop but not when I use accounts in IIS for

> anonymous logon or Windows authentication. The server is hosting IIS.

>

> I believe the problem would be resolved if I could simply add

> administrators and other accounts to the "Access This Computer From

> The Network" setting. The problem is, is that the "Add User or Group"

> button is greyed out (disabled) and so it's not possible to add the

> accounts.

>

> Why is this button disabled and how can I enable it? Is there

> something on the Domain Controller that needs to be setup to make this

> happen? Are some changes needed on the Domain Controller that need to

> be replicated back to my server? I am really green here, so please

> excuse my lack of knowledge.

>

> Thanks for your help

> Johann

>

>