"jewels" <jewels@discussions.microsoft.com> wrote in message
news:ADC5474F-B234-4C74-B85E-DC2785F36612@microsoft.com...
> In my Local Security Settings, Local Policies, User Rights Assignment,
> some
> policies have a security setting with a long, numerical account starting
> with
> an * (e.g., *1-1029-309039etc...). Why is this there, and will I mess up
> my
> settings by trying to remove it?


When you double-click on a policy to show its own properties window, is the
asterisk still there? I'm wondering if it isn't simply truncating a long
group or username. Normally these policies assign privileges based on a
group, not a particular account. So I'm wondering if you have groups or
accounts that were defined under a different instance of Windows whose SIDs
are unknown under your current instance of Windows.

--
__________________________________________________
Post replies to the newsgroup - Share with others.
E-mail: Remove "NIX" and append "#VC811" to Subject.
__________________________________________________