What the file that stores user policies in NT? 2000? (asap)

[OuTpaTienT]

What the file that stores user policies in NT? Is it the same in 2000?

Not to rush ya guys, but need help asap.

(mods, please don't move this message to the networking forum for a least a couple hours. thx.)

[Jim9999]

Are you thinking of Ntuser.dat?

Yes, there is an Ntuser.dat and Ntuser.pol in 2000 as well. I'm not sure I gave you the info you needed, but that's the best I can do without more details.

[BBA]

Yes...he is right, but if you are setting up policies, your safer to use "gpedit.msc" and computer management to define policies in W2K.

Also profiles can be manipulated in System Properties ( right click my computer ) under the User Profiles tab.

[OuTpaTienT]

With what I can find on the net, there should be a file called NTCONFIG.POL

Now, am I correct in thinking I could login as administrator, move the NTCONFIG.POL file to another (temp) directory (or rename it), then logout and login as a user that's normally restricted but won't be restricted now due to no policy file?

Basically I just need to unrestrict the user, perform a couple actions, and re-restrict him.

[BBA]

W2K does not use that, but I would not do it that way...

In favor of using the correct snap-in gui tool. The one's I listed above should cover all restrictions for users.

[Jim9999]

It might be easier and get you to an answer faster if you tell us (very) specifically what you are trying to accomplish.

[OuTpaTienT]

Ok, I give that a go. Thanks.

[OuTpaTienT]

Jim, I need to run a specific application as a specific user to complete setting up his account.

The application would be meaningless to you because it's a custom designed app that works with a database. To properly setup the user to be able to use this application I need to run one of it's custom setup files AS THE USER. But due to the user policies, this user doesn't have access to this setup file that I need to run. I've already tried being logged in as the admin and running the file AS the user (using RUNAS) but it didn't have the desired outcome.

Does that make sense?


[This message has been edited by OuTpaTienT (edited 04-02-2001).]

[BBA]

All you have to do is type "gpedit.msc" ( without the quotes ) in a run dialog line and it will start the application.
Look under Windows settings/Security Settings/Local Policies/User Rights

It pretty much has everything but user ID system rights...which is under computer management/users. File/Folder system rights are under the security tab of a file or folders properties ( if you use NTFS )

[Jim9999]

How about running the application as a service and use that user's credentials?

[Jim9999]

Yep - I like BBA's answer, too.

[OuTpaTienT]

Thanks for the help guys. My boss, who initially expressed some urgency with this, is now on the server so I can't get to it. [sigh] Well, I'll give it a shot in a little while and let ya know if I have success. I just hope he's not messing things up for me, he knows even less about this stuff than I do. http://www.sysopt.com/forum/wink.gif