When a PC is part of a Domain, you can run into the problem that the settings are locked out.
Because of the Domain Sec. Policy is overruling the local Policy
- Log onto the computer with an Administrator account.
- Start the Local Security Settings MMC (SECPOL.MSC)
- Export the current security settings to an INF file by right clicking the top node in the MMC and selecting Export from the context menu. (for Windows XP see additional information below) and name the file “current.inf” (name is not important)
- Open a blank MMC (Start > Run MMC)
- Add the Security Configuration and Analysis snap-in.
- Right-click the top node in Security Configuration and Analysis and select “New Database” and then save the database.
- When prompted to import a security template use the one exported in step 3 above (current.inf)
- Now right click Security Configuration and Analysis and select “Analyze Computer Now”.
- Now browse to the setting you want to modify. You will notice the database setting and computer settings are the same in all cases. Double-click the setting and make changes. Repeat for each setting you want to modify.
- When you are finished making changes, right-click top node and select “Configure Computer Now” and you changes will be applied.
Works like a charm