Problem with Windows XP user Rights

[Jagdish Gada]

hello

I am running XP pro on a new machine I made;
Asus P5N-D, Intel Quad Core 2.5G, 2G RAM, MSI NX880GTS.

I have been networking all my computer from home for years and have never came accross this problem, and all are the same operating system.

The problem comes when I try to set the "local security policy" - "user rights assignment" - "allow users to access this machine from the network" and enter any user into the policy it goes blank in a few minutes all by itself.

I don't know where i am getting wrong

Please help me in this

your views will be appreciated

[Zachary]

Next, run "gpupdate.exe /force" under command prompt to force the policy
refresh, reboot the Server to test. Additionally, domain user try to logoff
and then logon to client computer to test if user can save system logs.

If the issue persists, please help me collect group policy report for
further analyze:
1. Please run command " gpresult /v > c:\gpresult.txt" respectively in the
server box and some problematic workstation and find the files to mail to
me for analyze. My mailboxes: v-yanniw@xxxxxxxxxxxxx

2. Collect system/security log in the server box and the problematic
workstation. If the user still can not save system log permissions, you can
try to use domain admin account to test, or logon on to local computer
using local Administrator account to test,

[Big Fish]

Are you in the Local Security Policy editor (in Administrative tools) on the
Vista computer trying to change this? How did you configure the policy on the
server?

The Default Domain Policy is linked to the domain itself. Password policy
settings you make in there apply to all computers in the domain, except for
domain controllers (if the same settings are made in the Default Domain
Controllers Policy). Since you were managing the password policy using the
Default Domain Policy your password settings in Local Security Policy were
greyed out. You told the computer that you want the domain settings to rule.


The Default Domain Controllers Policy is linked to the Domain Controllers
OU. Since policy is processed in the LSDOU (Local, Site, Domain, OU) order,
that policy will override settings made in the Default Domain Policy for the
DCs.

Really, you need to read Jeremy's book if you are going to be playing with
Group Policy. You may want to read one of mine too to understand the security
settings.

[Shen]

Windows XP Professional Edition allows full User Management and Security.
The permissions assigned to the Usergroups (assigned in User Management to users)
are defined in the Local Security Policies: select in the Control-panel :

Select in the tree-view on the left : Security Settings / Local Policies / User Rights Assignment :

The "policies" are the permissions, which are/can be assigned to Usergroups
(and also to single usernames, although it is a kind of tradition to assign permissions to a usergroup and then make the user a member of the usergroup to get the permissions ).

Double click on a policy/permission to display the list of usergroups, which have already this permission.

Note : all users created in User Management are automatically member of the Usergroup "Everyone" To add a usergroup, use the button "Add User or Group..." To get a lookup of the usergroups and users, select
"Advanced" Use the button "Find Now" to display the list of Users
and UserGroups, then select to assign the permission.

The Local Security Policies also define some rules for the use of passwords:
By default, users will be requested to change their passwords every 42 days
(unless you have declared a password to "never expire" in User management ).
Double-click the entries to change the values.

You can change the password to expire already in less days or in more days (max. 999). If you like to avoid password changes,
change the value to 0.

The security policies also allow to define the behavior of the system, if somebody is entering a bad/wrong password several times : it could be an intruder, making some guesses of passwords and trying them:

[Steve123]

I think that MBSA program was designed for XP Professional and because of
that there are limitations when used in XP Home.

Local Security Policy is secpol.msc. Secpol.msc does not come with XP Home.
gpedit.msc which is Group Policy does not come with XP Home either.

Local Users and Groups (lusrmgr.msc) comes with XP Home, but this has
limited use. If you try to access Local Users and Groups (Local) with XP
Home, you will get...

[[This computer is running Windows XP Home Edition. This snapin may not be
used with that version of Windows. To manage user accounts for this
computer, use the User Accounts tool in the Control Panel]]