Microsoft KB Archive/296812

= Error Message Appears When You Try to Add Drivers or Change Network Settings After Upgrade =

Article ID: 296812

Article Last Modified on 3/2/2007

-

APPLIES TO


 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Advanced Server

-



This article was previously published under Q296812



SYMPTOMS
When you log on as an administrator and attempt to add drivers or change the network settings on a domain controller after upgrading the domain controller from Microsoft Windows NT Server 4.0, the following error message may appear:

You do not have sufficient security privileges to uninstall devices or to change device properties or device drivers. Please contact your site administrator, or log out and log in again as an administrator and try again.



CAUSE
This behavior can occur because not all of the rights and permissions are migrated to Windows 2000 Group Policy during the upgrade process.



RESOLUTION
To resolve this behavior, add the necessary permissions for the Administrator account:
 * 1) Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
 * 2) Right-click the domain controller's organizational unit, and then click Properties.
 * 3) Click the Group Policy tab, and then click Edit.
 * 4) Expand the Computer Configuration folder, expand the Windows Settings folder, expand the Security Settings folder, expand the Local Policies folder, and then click User Rights Assignment.
 * 5) Double-click Load and unload device drivers, and then click Add
 * 6) Type Administrators, and then click OK.
 * 7) Click OK to close the Security Policy Settings dialog box.
 * 8) To force a refresh of the Group Policy so that changes take effect quickly, click Start, click Run, type secedit /refreshpolicy machine_policy /enforce, and then click OK.
 * 9) Log off, and then log back on to the computer.



MORE INFORMATION
For additional information about using the SECEDIT utility, click the article number below to view the article in the Microsoft Knowledge Base:

227302 Using SECEDIT to Force a Group Policy Refresh Immediately

Keywords: kbgrppolicyinfo kbgrppolicyprob kbprb KB296812

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.