Windows Forum

Ask something
Discussion Locked

Remove Rights entries

0 helpful
3 replies

by hbartlet

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I noticed that in Windows 2000, with Active Directory, in Local Policies I can add users or groups to Logon Locally, etc but there is no way to remove the entries once they are added. Is removal from the list of users and groups for a right not possible (I'm logged in as Administrator)?

3 replies

by timwalsh

I'm assuming you are working on a domain controller.

If so, the basic problem is that the Local security policy is no longer functional once a server has been promoted to DC. It remains available (and can be edited as you have experienced) so you can see the prior settings. Once a server becomes a DC, only the Domain Security Policy and the Domain Controller Security Policy are totally funtional. The Domain Controller Security Policy effectively replaces the Local Security Policy on all Domain Controllers

by hbartlet

The problem with Local Security Policy Rights occurs on a member server (part of a domain) but you say the problem is only on a DC. Does it also apply to member servers?

This discussion is closed to new replies.