Administrator cannot see security tabs

[purepest]

Hi

I have a problem with a w2k server.

When I log in as administrator there are a number of things that I cannot do

1) Cannot view the security tab to amend NTFS permissions
2) When I make changes to DSNs, after I reboot the change has reverted back.
3) There is an event ID 1000 userenv error in event viewer stating that the registry cannot be unloaded.

The machine is on a domain and I have asked the customer to run gpresult to see if there is anything strange there, but if anyone has any other possible solutions I would appreaciate it.

 

[markdmac]

I would verify that the Admin account is in fact the admin account and not a renamed account. Make sure that Admin is a member of Domain Admins & Schema Admins.

Take a look at all GPOs. I prefer to explicitly block application to the Admin account within GPO security.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[purepest]

The administrator account is a member of the administrators group.

I am going to run gpresult on it to see if there are any gpo's on it then take it from there

 

[purepest]

i have the results from the gpresult test and there are a few reg key changes specifically in the systemcertificates reg hive

Software\Policies\Microsoft\SystemCertificates

I don't know if this has any bearing on my issues or not.

If I remove the machine from the domain, will any domain based policies be reverted back to what they were before the GPO was applied or will it just sit with the changes that have been made in the past?

 

[markdmac]

If the registry has been tattooed then the settings would remain. You would need to back out the policies via the registry first.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[purepest]

soz for neing a n00b but how do I do that?

 

[markdmac]

Look in the registry for the policies and delete the keys.

Start looking at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript