Any easy way to compare Local Security Policy of two Server 2003's

March 6, 2008

Hello all,

I'm new to this group and hopefully someone here can help me solve my

issue.

Some information first:

Two Server 2003 machines on identical hardware - Dell Poweredge 1950

Both running Microsoft Windows [Version 5.2.3790] Both with exactly

same hotfixes/patches Machines were installed a day apart with

identical settings - basically nothing from default Active Directory

domain - both machines in same OU

There seems to be a permission difference between the two, I'll

explain a bit more and I will refer to the machines as 01 and 02

- If I open the Printers/Faxes folder and right click in a blank

space, 01 gives me "Install a Fax Printer" under Server Properties,

whereas 02 gives me "Set up Faxing" under Server Properties

- if I enter Server Properties on 01 and click on the Advanced tab all

the options are available, if I do the same on 02 most of them are

greyed out

- if I use the sysinternals utillity pskill.exe to end a process on 01

it works fine, on 02 I get an access denied error

Both of these machines are logged in as domain\administrator, the

Local Users and Groups on both machines have domain\administrator in

the local Administrator group.

Both machines are receiving the same GPOs which are minimally

configured and there are no security lockdowns I can speicifically

think of.

All I can think of left to look at is security settings in the

machines Local Group Policy settings.

So after all the background, what I am asking is, is there any easy

way to compare the LGP's on each machine?

Recommended Posts