administratior denied access to local policy console/ftp problems

[Help is always greatly appreciated]

Documentation suggests the importance of enabling local log on user rights
for iusr_computername (the anonymous account taken on by any visitor to a
public FTP site) and indeed when I try to enter the site via browser from
another box access is denied even though the welcome message I put in there
appears. But it still says invalid port command 500 and asks me if I have
permission to enter the file after setting NTFS permissions correctly I think

I want to check local security policy but it's locked, even when I attempt
access to
that administrative mmc console as an administrator. (Note this ftp server
is just on win2k pro) Suggestions please? Also what's all this about "ftp
server back connects" to the client and needing "port h1, h2, h3, h4,,p1, p2"
for me to resolve a port connection. Note I have no DNS...this is just a
dynamically assigned ip address and it works fine for anonymous access to an
http://ip address site.

Thanks in advance for your help.
--