Administrator may unable edit group policy windows 2003 domain

If you try to reverse the changes to the administrator or guest account names by clearing the Define this policy setting check box in the Rename guest account or Rename administrator account dialog boxes, you may not be able to log on to the domain by using the default account names. To resolve this issue, use Group Policy to restore the default account names, and then clear the Define this policy setting check box:.

Skip to main content. This browser is no longer supported. Download Microsoft Edge More info. The group name that you have provided will appear in the Group name pre-Windows field to ensure that group is functional on domain computers that are using earlier versions of Windows such as Windows NT. Select the desired group scope of the group from the Group scope options. If the Domain Local Scope is selected the members can come from any domain but the members can access resources only from the local domain.

If Global scope is selected then members can come only from local domain but can access resources in any domain. If Universal scope is selected then members can come from any domain and members can access resources from any domain. Select the group type from the Group Type options.

The group type can be Security or Distribution. The Security groups are only used to assign and gain permissions to access resources and Distribution groups are used for no-security related tasks such as sending emails to all the group members. You can add members to group just as you add groups to members. Just right-click the group in Active Directory Users and Computers node in the Active Directory Users and Computers snap-in, select Properties , click Members tab from the Properties window of the group and then follow the steps from from Creating Local User Accounts section.

This article covered basic administration of user and group accounts at both local and domain environments. If you have found the article useful, we would really appreciate you sharing it with others by using the provided services on the top left corner of this article. Sharing our articles takes only a minute of your time and helps Firewall. Back to Windows Server Section.

Deal with bandwidth spikes Free Download. Web Vulnerability Scanner Free Download. Network Security Scan Download Now. User Accounts In Windows Server computers there are two types of user accounts. The local user accounts allow you to access local resources on a computer On the other hand the domain user accounts are created on domain controllers and are saved in Active Directory.

Creating a Local User Account To create a local user account, you need to: 1. Figure 1 3. Figure 2 4. Select the desired password settings requirement. Click Create , and then click Close: Figure 4 The user account will appear on clicking Users node under Local Users and Groups on the right panel of the window.

You can now associate the user to a group. To associate the user to a group, you need to: 8. Click Users folder under Local Users and Groups node. Right-click the user and then select Properties from the menu that appears, as shown in Figure 5: Figure 5 The Properties dialog box of the user account appears, as shown in Figure 6: Figure 6 The Select Groups dialog box appears, as shown in Figure 7.

Click OK. Figure 7 The selected group will be associated with the user and will appear in the Properties window of the user, as shown in Figure 8: Figure 8 Creating a Domain User Account The process of creating a domain user account is more or less similar to the process of creating a local user account. What does event viewer say? Any errors related to ntfrs service?

Hi, I can see NTFrs error in event viewer. It's been logged there every now and then. Any opinion? Thanks — R. Add a comment. Active Oldest Votes. Improve this answer. Hi, thanks for your reply. It's only a particular domain admin on that particular DC, DC1, which seems to have those problems.

That domain admin works fine on the PDC emulator. And no, it's not a new account. Stop FRS. Start Registry Editor Regedt. Sign up or log in Sign up using Google. Sign up using Facebook.