Hi All: We have running Server 2003 active directory. Some of the computer I log in as local administrator account, but I don't have the full access right, such as I don't have the right to Start -> Run command. 2: Unter Internet explorer -> Options-> Content advisor -> Enable, it is not allow me to enable it. Where is controlling this? Thanks.

hi there, administrator would have defined local policies for the computer which is not in a domain / for the local administrator account. you need to Open your local security policy. To do this, do one of the following: Click Start, click Run, type gpedit.msc, and then press ENTER.-or- Click Start, click Run, type mmc, press ENTER, add the Group Policy Object Editor, and then configure it for the local security policy. If the removal of the run command is one of the policies that you want, Microsoft recommends that you edit the policy by means of Microsoft Management Console (MMC), and then save the results as an icon. Then, you do not need the run command to reopen the policy. Expand the User Configuration object, and then expand the Administrative Templates object. you will find many templates under Administrative Template object, so you need to check which policies are applied and disable them is one option. sainath windows driver development.

Hello, Do you have any group policiesor local policies defined on the on the network ?? for checking the local policies please user this Starting the policy edit is quite simple. Click start and then run. Type "gpedit.msc" (minus the quotes) and press enter. The policy editor will start. It should say in the top left corner "local computer policy"User Configuration\AdministrativeTemplates\Start Menu & TaskbarRemove Run menu from Start Menu.see if the above is enabled.Also for Internet explorer setting these things can be disabled from the registry as well.http://www.pctools.com/guides/registry/detail/1098/http://technetfaqs.wordpress.com

Hello,If you are in a domain environment, then there must be a GPO configuration that is preventing you. but if computer is not in a domain, then follow Sainath suggestions below. If in the domain, then you will need to login to domain controller and look at the policiesIsaac Oben MCITP:EA, MCSE

1. when I login as the Administrator account, I login to the local PC, not domain. So should not be the domain gropu polic blocking me. 2. But If local group polic blocking me, how can I unblock it. Thanks.

hi there, i have mentioned in my first post about how to navigate to specific policy and check which are the policies are enabled and also syed has mentioned about the specific policy to enable Run command. Please do follow the above mentioned procedures and if you have any issues please do post back.sainath windows driver development.

ok go to C:\WINDOWS\system32 within this folder you must find mmc.exe click this mmc.exe go to file click addor remove snapinclick add select group policy object editor from here you will be able to manipulate settings againThanskhttp://technetfaqs.wordpress.com