Groups | Blog | Home
all groups > iis security > april 2005 >

iis security : prevent local security policy override


TW
4/6/2005 11:45:13 AM
I need to set the "log on as a batch job" security policy for an application
that uses IIS. I find that after each re-boot, my local setting are wiped out
and reset, even if I log on to a non-networked, local account. So even though
I am not on a network, there is some domain or group setting or registry
David Wang [Msft]
4/6/2005 10:09:31 PM
If it comes from a domain policy, you won't be able to override it. That
would defeat the whole purpose of a domain policy if a local user can just
turn off the policy and prevent being administered by the domain policy.

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
[quoted text, click to view]
I need to set the "log on as a batch job" security policy for an application
that uses IIS. I find that after each re-boot, my local setting are wiped
out
and reset, even if I log on to a non-networked, local account. So even
though
I am not on a network, there is some domain or group setting or registry
setting that is overriding my local settings. How can I prevent this?

TW
4/8/2005 3:58:00 PM
It turns out it was related to group-level inrformation stored on disk. I
had to delete the c:\<windows>\system32\groups* folders to get around this
problem. Perhaps there is a more elegant way of fixing the problem. Any
suggestions?

AddThis Social Bookmark Button