Cannot change entries for "Access This Computer From The Network"

[Polaris431]

I have little knowledge of Windows 2003 or Active Directory so please
bare with me.

I have a Windows 2003 server connected on a LAN that also has a Domain
Controller. Something happened a few days ago (don't know what) and it
is no longer possible to access the server over a network. The guy who
owns the system played around with Active Directory on the Domain
Controller to see if he could get things working again but to no
avail.

After digging around, I discovered that there is a local policy on the
server that is called "Access This Computer From The Network". It has
only two entries in the list and neither of these are the defaults. In
fact, not even administrators are part of the list. This appears to be
the reason why I cannot access the computer over the network. Actually
I can if I use Remote Desktop but not when I use accounts in IIS for
anonymous logon or Windows authentication. The server is hosting IIS.

I believe the problem would be resolved if I could simply add
administrators and other accounts to the "Access This Computer From
The Network" setting. The problem is, is that the "Add User or Group"
button is greyed out (disabled) and so it's not possible to add the
accounts.

Why is this button disabled and how can I enable it? Is there
something on the Domain Controller that needs to be setup to make this
happen? Are some changes needed on the Domain Controller that need to
be replicated back to my server? I am really green here, so please
excuse my lack of knowledge.

Thanks for your help
Johann

 

[Dragos CAMARA]

RE: Cannot change entries for "Access This Computer From The Network"

hi,
you have to check the GPO's that are applied to the server and make the
changes there on that. They are greyed because are set on a GPO on domain.
--
Dragos CAMARA
MCSA Windows 2003 server


"Polaris431" wrote:

> I have little knowledge of Windows 2003 or Active Directory so please
> bare with me.
>
> I have a Windows 2003 server connected on a LAN that also has a Domain
> Controller. Something happened a few days ago (don't know what) and it
> is no longer possible to access the server over a network. The guy who
> owns the system played around with Active Directory on the Domain
> Controller to see if he could get things working again but to no
> avail.
>
> After digging around, I discovered that there is a local policy on the
> server that is called "Access This Computer From The Network". It has
> only two entries in the list and neither of these are the defaults. In
> fact, not even administrators are part of the list. This appears to be
> the reason why I cannot access the computer over the network. Actually
> I can if I use Remote Desktop but not when I use accounts in IIS for
> anonymous logon or Windows authentication. The server is hosting IIS.
>
> I believe the problem would be resolved if I could simply add
> administrators and other accounts to the "Access This Computer From
> The Network" setting. The problem is, is that the "Add User or Group"
> button is greyed out (disabled) and so it's not possible to add the
> accounts.
>
> Why is this button disabled and how can I enable it? Is there
> something on the Domain Controller that needs to be setup to make this
> happen? Are some changes needed on the Domain Controller that need to
> be replicated back to my server? I am really green here, so please
> excuse my lack of knowledge.
>
> Thanks for your help
> Johann
>
>