Local Security Policy automatically resets


Go Back   Computer Help Articles > Windows XP Security Admin
User Name
Password
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 01-05-2006, 11:14 PM
Bob S
 
Posts: n/a
Default Local Security Policy automatically resets

I having difficulties getting an XP Pro machine on my LAN to share it's printer. I've traced the problem down to having
an undefined Local Policies | User Rights Assignment | Access this computer from the network. When I add any user or
group account to the policy the system will erase the account within five minutes. I can use the printer remotely for
the few minutes before the value is removed.

Why is the system removing the value?

This machine used to be part of a domain and I removed it from the domain. It is now just part of a workgroup. I also
modified some values in the LSP but I don't see what would have caused the problem. I also installed MS Antispyware
beta, which I have since removed.

Any ideas would be greatly appreciated.
Reply With Quote
  #2  
Old 01-05-2006, 11:14 PM
David H. Lipman
 
Posts: n/a
Default Re: Local Security Policy automatically resets

From: "Bob S" <bsremovemetrachan@nycap.rr.com>

| I having difficulties getting an XP Pro machine on my LAN to share it's printer. I've
| traced the problem down to having an undefined Local Policies | User Rights Assignment |
| Access this computer from the network. When I add any user or group account to the policy
| the system will erase the account within five minutes. I can use the printer remotely for
| the few minutes before the value is removed.
|
| Why is the system removing the value?
|
| This machine used to be part of a domain and I removed it from the domain. It is now just
| part of a workgroup. I also modified some values in the LSP but I don't see what would
| have caused the problem. I also installed MS Antispyware beta, which I have since
| removed.
|
| Any ideas would be greatly appreciated.


What share a printer via a WinXP PC ?

It is far better to use a HP JetDirect Print Server and have the computers print to its IP
address.

This alleviates having loading File and Print Shares on the workstation and using someones
PC as a print server.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


Reply With Quote
  #3  
Old 01-05-2006, 11:14 PM
Bob S
 
Posts: n/a
Default Re: Local Security Policy automatically resets

Dave,

It is what I have. This is a home network and I want to share the printer.

The problem is that I can't make changes to LSP that stick.

Bob

David H. Lipman wrote:

> From: "Bob S" <bsremovemetrachan@nycap.rr.com>
>


>
>
> What share a printer via a WinXP PC ?
>
> It is far better to use a HP JetDirect Print Server and have the computers print to its IP
> address.
>
> This alleviates having loading File and Print Shares on the workstation and using someones
> PC as a print server.
>

Reply With Quote
  #4  
Old 01-05-2006, 11:14 PM
David H. Lipman
 
Posts: n/a
Default Re: Local Security Policy automatically resets

From: "Bob S" <bsremovemetrachan@nycap.rr.com>

| Dave,
|
| It is what I have. This is a home network and I want to share the printer.
|
| The problem is that I can't make changes to LSP that stick.
|
| Bob
|

OK. The way you posted the query, I came to the faux conclusion this was a
business/enterprise situation and not a SOHO LAN.

I have to assume that its being part of a Domain had something to do with it and I wonder if
there are some HLM\ Local or Group policies in the Registry that are blocking its use.

Look through the below for printer restrictions...

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\policies\Explorer

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\policies\Explorer

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group Policy Objects

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Group Policy Objects


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


Reply With Quote
  #5  
Old 01-05-2006, 11:14 PM
Bob S
 
Posts: n/a
Default Re: Local Security Policy automatically resets

Dave,

It isn't that I can't print. The problem is that I can't get network policies to stick in Local Policy Editor. It
looks like the policy is getting stepped on by a group policy, but it isn't part of a group. I've found the Local
computer policy and I can't get it to stick either.

I can change other values such as audit policies and they don't revert back. You can see where the privlege is revoke
in the Security log by computer$ (system). I've watched files get accessed using filemon from sysinternals and I've
tracked it down to lsass.exe removing the privilege.

Why is the system stepping my security policies? Is there some sort of "security lock" similar to Windows System File
lock. Am I running in some sort of corrupted or temporary security context?
Bob
Reply With Quote
  #6  
Old 01-05-2006, 11:14 PM
David H. Lipman
 
Posts: n/a
Default Re: Local Security Policy automatically resets

From: "Bob S" <bsremovemetrachan@nycap.rr.com>

| Dave,
|
| It isn't that I can't print. The problem is that I can't get network policies to stick in
| Local Policy Editor. It looks like the policy is getting stepped on by a group policy,
| but it isn't part of a group. I've found the Local computer policy and I can't get it to
| stick either.
|
| I can change other values such as audit policies and they don't revert back. You can see
| where the privlege is revoke in the Security log by computer$ (system). I've watched
| files get accessed using filemon from sysinternals and I've tracked it down to lsass.exe
| removing the privilege.
|
| Why is the system stepping my security policies? Is there some sort of "security lock"
| similar to Windows System File lock. Am I running in some sort of corrupted or temporary
| security context? Bob


I don't know. The ONLY thing I can think of is to sysprep the PC so all SIDs are stripped.

I know it isn't the best answer :-(


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
local security policy bud Windows XP Security Admin 4 01-05-2006 05:07 AM
XP Home / local security policy questions Stewart Bourke Windows XP Security Admin 3 01-05-2006 05:03 AM
local security policy Mellor Windows XP New Users 1 01-05-2006 02:52 AM
Long delay before Drives & Files appear in My Computer & Address Bar shizzlenizzlator@gmail.com Windows XP Help and Support 3 01-05-2006 02:44 AM
System Restore gmirek Windows XP General 6 01-05-2006 02:34 AM


All times are GMT. The time now is 08:47 AM.


Powered by vBulletin Version 3.5.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd. SEO by vBSEO 2.3.2 © 2005, Crawlability, Inc.

Local Security Policy automatically resets