Can't enable debug privileges for a user account

we following instructions found here: http://forum.sysinternals.com/printer_friendly_posts.asp?tid=1264
in attempt give debug privileges user in 1 of our windows server 2003 sp2 boxes.

when open properties of 'debug programs' policy in server's local security settings, 'add user or group' button , 'remove' buttons greyed out.  somehow 3 users listed, can't add more.

our theory these priviliges being populated active directory (a different 2003 sp2 server on our network), we're not sure how.
we see group called "debugger privileges" in our active directory server, , added user there, doesn't appear propogating other servers on domain.

can help?
let me know if need more information.

thanks!

hello pug2694328,

to set "debug programs" policy in other member servers in domain, need assign domain group policy these servers. can follow steps below:

1. in active directory users , computers, right-click target server's container (ou) to want link gpo, click properties, , click group policy tab.
2. create new gpo giving debug privileges on servers, , give new gpo descriptive name.
3. while new gpo selected, click edit. starts group policy object editor.
4. open , right-click computer configuration | windows settings | security settings | local policies | user rights assignment | debug program in gpo, , click add new user or group button.
5. click advanced button.
6. click find now button.
7. select your user logon name , click the ok button.
8. click ok button 2 more times.
9. run "gpupdate /force" on target servers.
10. run "rosp.msc" verify whether "debug programs" group policy has been applied.

if want configure policy dcs, need modify above policy in aduc's default domain controller policy.

more information at: http://technet.microsoft.com/en-us/library/dd378987(ws.10).aspx

best regards,
wilson jia

---

this posting provided "as is" no warranties, , confers no rights.

Windows Server  >  Management