re: Unlocking the Local Security Policy on a Computer

Pepe — Wed, 10 Jan 2007 06:30:43 GMT

Hi, your article was very useful, but when I follow the instructions I can only get "Account Policies" and "Local Polocies". Do you know how to perform a similar action such that I can also capture the "Even Log", "Restricted Groups", "System Services", "Registry" and "File System" ? Thanks a lot, Pepe.

re: Unlocking the Local Security Policy on a Computer

MuadDib — Sat, 13 Jan 2007 16:13:56 GMT

The Local Security Policy only contains the settings for Account Policies, LocalPolicies and a few others. The other settings are configured via Group Policy. TO modify the local computers Group Policy do the following:

1. Start > Run > type MMC ad press <ENTER>

2. Add the Group Policy snap-in (local computer)

You will see all the settings you are looking for. Keep in mind that of your computer is a member of a domain, GPOs from the domain will overwrite any settings you modify at the next refresh. GPOs are applied in the following order:

Local
    Site
        Domain
            OU
                OU

Any settings in your local GPO can be overwritten by the Domain, Site , and Organizational Unit GPOs in that order.