|Subject:||using secpol.msc on win2k3|
|Posted by:||jerrydy (jerry…@discussions.microsoft.com)|
|Date:||Thu, 28 Sep 2006|
I have a domain controller running win2k3. I ran secpol.msc and under
Security Settings -> Local Policies -> User Rights Assignment -> Access this
computer from the network Properties, I am unable to add any user or group.
The checkbox for enabling this policy is not visible. I assume because this
is a domain controller so I'm supposed to use "Domain Controller Security
Policy" tool instead. Can anybody verify that.
Here's the problem that I encounter. When I use Domain Controller Security
Policy, then go to Security Settings -> Local Policies -> User Rights
Assignment -> Access this computer from the network Properties and define the
policy setting by adding users or groups, I get the error that "An extended
error has occurred. Failed to save
Well, I did try to use Explorer and go to \\domain.local\sysvol and I get
the error "\\domain.local\SYSVOL is not accessible. You might not have
permission to use this network resource...". If instead I use
\\server.domain.local\sysvol, then I'm able to drill down correctly.
Right now, the server has shared folders and none of the clients are able to
access them. The only thing I remember doing between now and the last time
this was working was I updated the Domain Function Level and the Forest
Functional Level to Windows Server 2003. But I can't rollback so unless I
solve this, none of the clients can do map the shared drives.
Any help would be appreciated! Thanks!