# Why can't I edit Local Security policy? (WINXP SP2)

**URL:** https://boards.straightdope.com/t/why-cant-i-edit-local-security-policy-winxp-sp2/408476
**Category:** Factual Questions
**Created:** [June 18, 2007, 4:41pm UTC](https://boards.straightdope.com/t/why-cant-i-edit-local-security-policy-winxp-sp2/408476 "2007-06-18T16:41:15Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![PatriotX](https://avatars.discourse-cdn.com/v4/letter/p/c4cdca/32.png) [@PatriotX](https://boards.straightdope.com/u/PatriotX)
#### Post date: [June 18, 2007, 4:41pm UTC](https://boards.straightdope.com/t/why-cant-i-edit-local-security-policy-winxp-sp2/408476/1 "2007-06-18T16:41:15Z")

</div>

The options are all greyed out and not set to my liking.

This is my work computer.

As limited as my knowledge is, I’m THE tech guy for the place. There’s no question of upsetting anyone by changing the settings.

So what gives? What would lock these out?

---

<div class="post-metadata">

### Author: ![WorkInProgress](https://avatars.discourse-cdn.com/v4/letter/w/f04885/32.png) [@WorkInProgress](https://boards.straightdope.com/u/WorkInProgress)
#### Post date: [June 18, 2007, 8:50pm UTC](https://boards.straightdope.com/t/why-cant-i-edit-local-security-policy-winxp-sp2/408476/2 "2007-06-18T20:50:38Z")

</div>

Either you don’t have admin rights on the box or group policy at the domain level prevents you from making the change.

---

<div class="post-metadata">

### Author: ![PatriotX](https://avatars.discourse-cdn.com/v4/letter/p/c4cdca/32.png) [@PatriotX](https://boards.straightdope.com/u/PatriotX)
#### Post date: [June 19, 2007, 3:05am UTC](https://boards.straightdope.com/t/why-cant-i-edit-local-security-policy-winxp-sp2/408476/3 "2007-06-19T03:05:56Z")

</div>

curiouser and curiouser…

I can’t imagine what domain it would be a part of.  
anyway thanks for your response.

---

<div class="post-metadata">

### Author: ![gotpasswords](https://avatars.discourse-cdn.com/v4/letter/g/c57346/32.png) [@gotpasswords](https://boards.straightdope.com/u/gotpasswords)
#### Post date: [June 19, 2007, 6:05am UTC](https://boards.straightdope.com/t/why-cant-i-edit-local-security-policy-winxp-sp2/408476/4 "2007-06-19T06:05:00Z")

</div>

Unless you loaded the PCs yourself with a standard Windows install disc, and not a vendor’s “restore” disc or a corporate image, you probably don’t have full admin rights.

Either your ID type is set up as a “power user” or, as mentioned above, there’s a group policy in effect. In a small company, I’m guessing whoever set up your computer put you as a power user, whereas somone like me, in a mega-corporation can be in the odd situation of being an Active Domain administrator, but still not have full admin rights to their PC, thanks to group policies.
