Home All Groups Group Topic Archive Search About

prevent local security policy override

Author
6 Apr 2005 6:45 PM
TW
I need to set the "log on as a batch job" security policy for an application
that uses IIS. I find that after each re-boot, my local setting are wiped out
and reset, even if I log on to a non-networked, local account. So even though
I am not on a network, there is some domain or group setting or registry
setting that is overriding my local settings. How can I prevent this?

Author
7 Apr 2005 5:09 AM
David Wang [Msft]
If it comes from a domain policy, you won't be able to override it. That
would defeat the whole purpose of a domain policy if a local user can just
turn off the policy and prevent being administered by the domain policy.

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"TW" <T*@discussions.microsoft.com> wrote in message
news:D96A7B66-4FFB-4328-A377-7AE63F91ADAB@microsoft.com...
I need to set the "log on as a batch job" security policy for an application
that uses IIS. I find that after each re-boot, my local setting are wiped
out
and reset, even if I log on to a non-networked, local account. So even
though
I am not on a network, there is some domain or group setting or registry
setting that is overriding my local settings. How can I prevent this?
Author
8 Apr 2005 7:58 PM
TW
It turns out it was related to group-level inrformation stored on disk. I
had to delete the c:\<windows>\system32\groups* folders to get around this
problem. Perhaps there is a more elegant way of fixing the problem. Any
suggestions?