| 181 |
| Administrative tools stop working after you removed the Everyone group |
| The Microsoft Management Console (MMC) Active Directory Sites and |
| - The MMC Active Directory Users and Computers snap-in |
| - The MMC Active Directory Domains and Trusts snap-in |
| - Group Policy Editor (GPE) |
| To resolve the problem, perform the following steps: |
| \%systemroot%\sysvol\sysvol\domainname\policies\<policy |
| guid>\machine\microsoft\windows nt\secedit folder for the policy |
| affecting the "Access this computer from the network" user right, then |
| locate and open the gpttmpl.inf file. To determine the correct policy, |
| you'll need to identify the appropriate globally unique identifier |
| (GUID) for the policy. You can determine a policy's GUID by opening |
| the Active Directory Users and Computers snap-in, displaying the |
| container's Properties dialog box, clicking the Group Policy tab, then |
| viewing the policy's properties. Because the Active Directory Users |
| and Computers snap-in might not be accessible, you'll probably have to |
| manually view each policy's GUID to identify the correct Group Policy |
| 2. From the gpttmpl.inf file, copy everything after |
| "SeInteractiveLogonRight=". The string of values will look similar to |
| SeInteractiveLogonRight = |
| *S-1-5-32-550,*S-1-5-32-549,*S-1-5-32-548,*S-1-5-32-551,*S-1-5-32-544,*S-1-5-21-907700337-33305 |
| 3. Paste the string of values you copied from the |
| SeInteractiveLogonRight line after the equals (=) sign in the |
| "SeNetworkLogonRight=" line in the gpttmpl.inf file. |
| 4. Save the changes, then close the gpttmpl.inf file. |
| 5. Locate and open the gpt.ini file at the following folder: |
| \%systemroot%\sysvol\sysvol\domainname\policies\<policy guid> |
| 6. Increase the version number. For example, change |
| 7. Save and close the file. |
| 8. Force a replication of the GPO by opening a command session and |
| secedit /refreshpolicy machine_policy /enforce |
First Previous Next Last |