From: "Bob S" <bsremovemetrachan@nycap.rr.com>

| Dave,
|
| It isn't that I can't print. The problem is that I can't get network policies to stick in
| Local Policy Editor. It looks like the policy is getting stepped on by a group policy,
| but it isn't part of a group. I've found the Local computer policy and I can't get it to
| stick either.
|
| I can change other values such as audit policies and they don't revert back. You can see
| where the privlege is revoke in the Security log by computer$ (system). I've watched
| files get accessed using filemon from sysinternals and I've tracked it down to lsass.exe
| removing the privilege.
|
| Why is the system stepping my security policies? Is there some sort of "security lock"
| similar to Windows System File lock. Am I running in some sort of corrupted or temporary
| security context? Bob


I don't know. The ONLY thing I can think of is to sysprep the PC so all SIDs are stripped.

I know it isn't the best answer :-(


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm