Article ID: 257247 - View products that this article applies to.
This article was previously published under Q257247
IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/256986/EN-US/ )Description of the Microsoft Windows Registry
When you implement service security settings in Group Policy, the Everyone group is granted Full Control by default. You may not want this setting for security purposes, however, when you use computer-based Group Policy to change permissions, the policy may not be applied and there is no way to change permissions on the service.
After you refresh the policy with Secedit or by restarting the computer, the following problems may occur:
This behavior occurs because the system account or the service account configured for the service is not granted Full Control of the service.
To resolve this problem, use the following steps to remove the security on the service.
NOTE: Before you use the following steps, you must configure the Group Policy Object (GPO) correctly. To correctly configure a Group Policy to set a permission on a system service, refer to the following Microsoft Knowledge Base article:
(http://support.microsoft.com/kb/256345/EN-US/ )Configuring Group Policies to Set Security for System Services
Steps to Reset Permissions to Allow Policy ApplicationWARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
Microsoft has confirmed this to be a problem in Microsoft Windows 2000.