Article ID: 296812
Article Last Modified on 3/2/2007
APPLIES TO
- Microsoft Windows 2000 Server
- Microsoft Windows 2000 Advanced Server
This article was previously published under Q296812
SYMPTOMS
When you log on as an administrator and attempt to add drivers or change the network settings on a domain controller after upgrading the domain controller from Microsoft Windows NT Server 4.0, the following error message may appear:
CAUSE
This behavior can occur because not all of the rights and permissions are migrated to Windows 2000 Group Policy during the upgrade process.
RESOLUTION
To resolve this behavior, add the necessary permissions for the Administrator account:
- Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
- Right-click the domain controller's organizational unit, and then click Properties.
- Click the Group Policy tab, and then click Edit.
- Expand the Computer Configuration folder, expand the Windows Settings folder, expand the Security Settings folder, expand the Local Policies folder, and then click User Rights Assignment.
- Double-click Load and unload device drivers, and then click Add
- Type Administrators, and then click OK.
- Click OK to close the Security Policy Settings dialog box.
- To force a refresh of the Group Policy so that changes take effect quickly, click Start, click Run, type secedit /refreshpolicy machine_policy /enforce, and then click OK.
- Log off, and then log back on to the computer.
MORE INFORMATION
For additional information about using the SECEDIT utility, click the article number below to view the article in the Microsoft Knowledge Base:
227302 Using SECEDIT to Force a Group Policy Refresh Immediately
Keywords: kbgrppolicyinfo kbgrppolicyprob kbprb KB296812
