Cannot edit "Log on as a service" and "Allow log on locally" policies on W2K3 server.

[Guest SBS Rocker]

Cannot edit "Log on as a service" and "Allow log on locally" policies on W2K3 server.

 

OK first off this is a repost of my issues. My apologies. I didn't get the

answers I needed so I'm trying again. Thanks to those who offered their

input. Here's my environment and what I'm trying to do here. Seems simple

yet I cannot figure out why I can no longer do this.

 

Windows SBS 2003 Server/Premium SP1/ISA 2004 SP2/MS Exchange 2003 SP2/Dual

NIC

Windows 2003 Server Standard SP1

 

 

I am installing a new version of a program on my W2K3 SP1 server and one of

the requirements is to create a "local" user account and grant this account

the right to "Log on as a service" on the local machine. However when I go

into the Local Security Policy editor/Security settings/Local Policies/User

Rights Assignment, I do not get the option to add or edit. It is greyed out.

Funny thing is this policy and the "Allow log on locally" policy are the

only two I cannot make a change to. These two policies both have different

icons showing so I'm not sure what that indicates but am sure it has to do

with why I cannot make any changes there. Now I'm also sure at some point

and time I ws able to edit these policies according to the accounts that are

there now. So what happened and does anyone have a good reason why or better

yet how I can edit these policies? I have tried both ways using a domain

admin account as well as the local admin account. Any ideas?

[Guest Chris M]

Re: Cannot edit "Log on as a service" and "Allow log on locally"policies on W2K3 server.

 

Re: Cannot edit "Log on as a service" and "Allow log on locally"policies on W2K3 server.

 

SBS Rocker wrote:

> OK first off this is a repost of my issues. My apologies. I didn't get the

> answers I needed so I'm trying again. Thanks to those who offered their

> input. Here's my environment and what I'm trying to do here. Seems simple

> yet I cannot figure out why I can no longer do this.

>

> Windows SBS 2003 Server/Premium SP1/ISA 2004 SP2/MS Exchange 2003 SP2/Dual

> NIC

> Windows 2003 Server Standard SP1

>

>

> I am installing a new version of a program on my W2K3 SP1 server and one of

> the requirements is to create a "local" user account and grant this account

> the right to "Log on as a service" on the local machine. However when I go

> into the Local Security Policy editor/Security settings/Local Policies/User

> Rights Assignment, I do not get the option to add or edit. It is greyed out.

> Funny thing is this policy and the "Allow log on locally" policy are the

> only two I cannot make a change to. These two policies both have different

> icons showing so I'm not sure what that indicates but am sure it has to do

> with why I cannot make any changes there. Now I'm also sure at some point

> and time I ws able to edit these policies according to the accounts that are

> there now. So what happened and does anyone have a good reason why or better

> yet how I can edit these policies? I have tried both ways using a domain

> admin account as well as the local admin account. Any ideas?

>

 

The 'different' icons that you see are probably signifying that the

settings are being inherited from a Group Policy.

 

Run RSOP.msc on the server, drill down to those settings and it'll tell

you which policy is applying to those settings.

 

 

--

Chris M.

 

Remove pants to email me.