+ Post New Thread
Page 2 of 2 FirstFirst 12
Results 16 to 25 of 25
Network and Classroom Management Thread, Sysadmin not full rights on RM CC3 in Technical; Originally Posted by Nozza Yes I raised a call a whilst ago. They don't have an answer as such other ...
  1. #16

    sparkeh's Avatar
    Join Date
    May 2007
    Posts
    6,794
    Thank Post
    1,292
    Thanked 1,656 Times in 1,110 Posts
    Blog Entries
    22
    Rep Power
    507
    Quote Originally Posted by Nozza View Post
    Yes I raised a call a whilst ago. They don't have an answer as such other than to create a new account. Which is probably the best thing.

    I can work around it by making w registry changes which I've put in a reg file for quick use but whilst handy that's not the point. I'm still interested to know what is actually going on!
    Hmm, does a new account work for you?

    I too am interested in why this is happening, it would be concerned it is indicative of other problems, such as gpos not being correctly applied or something.

    Out of interest, when you login, can you run gpresult from the commandline? It lists all the policies that are being applied.

  2. #17

    Join Date
    Dec 2008
    Posts
    66
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Are you talking about he local machine or the server?

    On the local machine it says INFO: The policy object does not exist.

    I have done the registry fix on it though - if that makes any difference.

  3. #18

    sparkeh's Avatar
    Join Date
    May 2007
    Posts
    6,794
    Thank Post
    1,292
    Thanked 1,656 Times in 1,110 Posts
    Blog Entries
    22
    Rep Power
    507
    Quote Originally Posted by Nozza View Post
    Are you talking about he local machine or the server?
    local machine.

    Quote Originally Posted by Nozza View Post
    On the local machine it says INFO: The policy object does not exist..
    Bah! I am seeing this a fair bit now as well, not got round to working out why, or if its a problem. Some machines are returning the policy list, some aren't. Nevermind just an idea.

  4. #19

    Join Date
    Dec 2008
    Posts
    66
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0
    OK update: the new account made no difference.

    What access I do get differs on different machines it would appear.

    BTW. using CC3 - is it usual for the workstations' Firewall settings to be greyed out for admins? Because most are except some machines where it isn't?!

  5. #20

    TechMonkey's Avatar
    Join Date
    Dec 2005
    Location
    South East
    Posts
    3,292
    Thank Post
    226
    Thanked 406 Times in 303 Posts
    Rep Power
    162
    I found recently that unless a machine was set to Personal the firewall settings seemed to be locked. I haven't investigated further on this though as it wasn't that big a deal for the problem I was solving. Check the different machines though?

  6. #21

    bossman's Avatar
    Join Date
    Nov 2005
    Location
    England
    Posts
    3,942
    Thank Post
    1,199
    Thanked 1,069 Times in 760 Posts
    Rep Power
    330
    Do you have Microsoft group policy management tool installed on your workstation?
    If so then you can check all of your GPOs as i remember ours corrupted on a few so were not getting applied had to go in and manually change them, works fine now.

  7. Thanks to bossman from:

    webman (16th December 2008)

  8. #22

    Join Date
    Dec 2008
    Posts
    66
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0
    I've been told that windows firewall should be greyed out for workstations if a group policy has been applied to the domain - it's deliberately like that to allow only global control. However this clearly presents problems should any individual workstation uses a piece of software needing access to the internet via various ports etc.

    I'm not aware of having MS group policy management tool on the PC but how would I check to be sure?

    I tried another new account and this one seems to have worked. I'm not happy with it though since I still don't understand what exactly is going on.

  9. #23

    bossman's Avatar
    Join Date
    Nov 2005
    Location
    England
    Posts
    3,942
    Thank Post
    1,199
    Thanked 1,069 Times in 760 Posts
    Rep Power
    330
    @Nozza:
    Yes it is greyed out as the GPO is set to disable the firewall.
    Download the Microsoft group policy management tool and install it to your workstation under systemadmin account it will then allow you to view and change your GPOs if they have been corrupted in any way.
    Webman and myself had a problem with the MMC being greyed out in places so I installed above to see what the problems were as I had determined group policies were not being applied.
    It told me that it couldn't open certain policies because they were corrupted, had to manually change them.

  10. #24

    Join Date
    Dec 2008
    Posts
    66
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0
    I think the group policy is to allow the firewall to be on but it restricts it's use.

    Probably a stupid Q but will the GP management tool only affect GPOs on that specific workstation?

  11. #25

    bossman's Avatar
    Join Date
    Nov 2005
    Location
    England
    Posts
    3,942
    Thank Post
    1,199
    Thanked 1,069 Times in 760 Posts
    Rep Power
    330
    @nozza:
    No you will be able to view all of the global GPOs which are on your DC and allocated to the domain.
    These affect all your workstations.
    Do you use client security by any chance (the little padlock icon in system management tools)?

SHARE:
+ Post New Thread
Page 2 of 2 FirstFirst 12

Similar Threads

  1. CC3 Learning Resources on non-CC3 PC?
    By docboggle in forum Network and Classroom Management
    Replies: 4
    Last Post: 7th July 2008, 11:16 AM
  2. Friday, July 27th, 2007 - Sysadmin day
    By _Bat_ in forum Jokes/Interweb Things
    Replies: 21
    Last Post: 28th July 2007, 09:11 PM
  3. Sysadmin Appreciation day
    By IanB in forum General Chat
    Replies: 15
    Last Post: 29th July 2006, 06:31 AM
  4. digital rights
    By russdev in forum General Chat
    Replies: 0
    Last Post: 28th July 2005, 02:37 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •