using secpol.msc on win2k3

Giganews Newsgroups
Subject: using secpol.msc on win2k3
Posted by:  jerrydy (jerry…@discussions.microsoft.com)
Date: Thu, 28 Sep 2006

I have a domain controller running win2k3. I ran secpol.msc and under
Security Settings -> Local Policies -> User Rights Assignment -> Access this
computer from the network Properties, I am unable to add any user or group.
The checkbox for enabling this policy is not visible. I assume because this
is a domain controller so I'm supposed to use "Domain Controller Security
Policy" tool instead. Can anybody verify that.

Here's the problem that I encounter. When I use Domain Controller Security
Policy, then go to Security Settings -> Local Policies -> User Rights
Assignment -> Access this computer from the network Properties and define the
policy setting by adding users or groups, I get the error that "An extended
error has occurred. Failed to save
\\domain.local\sysvol\domain.local\Policies\{...}\Machine\Microsoft\Windows
NT\SecEdit\GptTmpl.inf".

Well, I did try to use Explorer and go to \\domain.local\sysvol and I get
the error "\\domain.local\SYSVOL is not accessible. You might not have
permission to use this network resource...". If instead I use
\\server.domain.local\sysvol, then I'm able to drill down correctly.

Right now, the server has shared folders and none of the clients are able to
access them. The only thing I remember doing between now and the last time
this was working was I updated the Domain Function Level and the Forest
Functional Level to Windows Server 2003. But I can't rollback so unless I
solve this, none of the clients can do map the shared drives.

Any help would be appreciated! Thanks!

-Jerry

Replies