Error Open Policy

Hi

I installed "Ntrights" from Windows Server 2003 Tool Kits. I wanted to deny
the right to logon locally to an Administrator from a computer. At the
command prompt, I typed the following possibilities:

ntrights -r SeDenyInteractiveLogonRight -u Administrators -m \\computername

ntrights -r SeDenyInteractiveLogonRight -u Administrators -m \\ipaddress

ntrights -r SeDenyInteractiveLogonRight -m \\username

I also tried these:

ntrights -r SeNetworkLogonRight -u Administrators -m \\computername

ntrights -r SeNetworkLogonRight -u Administrators -m \\ipaddress

ntrights -r SeNetworkLogonRight -m \\username

All returned the same error: Error Open Policy - 1073741790

I can ping both ways. I disabled the Firewall. In the Ntrights Help, there
isn't much help. It is not impressive. I have looked in the Knowledge Base
and sought help from Google. I simply run out of ideas and I thought that
you may be able to help.

Thank you.

Your syntax looks correct except that when you use a username you don't use \\ and
you use -u instead of -m as in [ ntrights -r SeDenyInteractiveLogonRight -u
username ]. I have used it before without a problem. You must be a local
administrator on the computer where you want to change the user right. I don't know
if they changed anything in W2003. I would try ntrights /? at the command prompt to
find the built in help. Also if you wan to add a user/group to a right as in deny
logon locally use +r. --- Steve


"Harry" <H@H> wrote in message news:%23X70$(E-Mail Removed)...
> Hi
>
> I installed "Ntrights" from Windows Server 2003 Tool Kits. I wanted to deny
> the right to logon locally to an Administrator from a computer. At the
> command prompt, I typed the following possibilities:
>
> ntrights -r SeDenyInteractiveLogonRight -u Administrators -m \\computername
>
> ntrights -r SeDenyInteractiveLogonRight -u Administrators -m \\ipaddress
>
> ntrights -r SeDenyInteractiveLogonRight -m \\username
>
> I also tried these:
>
> ntrights -r SeNetworkLogonRight -u Administrators -m \\computername
>
> ntrights -r SeNetworkLogonRight -u Administrators -m \\ipaddress
>
> ntrights -r SeNetworkLogonRight -m \\username
>
> All returned the same error: Error Open Policy - 1073741790
>
> I can ping both ways. I disabled the Firewall. In the Ntrights Help, there
> isn't much help. It is not impressive. I have looked in the Knowledge Base
> and sought help from Google. I simply run out of ideas and I thought that
> you may be able to help.
>
> Thank you.
>
>