I was just fiddling with those security policies in Win 2000 Server and i have just realized that i could give or take privileges by editing "GptTmpl.inf". That file has rights inside with SID's next to them. By adding new SID's or removing the existing ones you can give or take away privileges on the system?!?!? Is this supposed to be there or could this be some sort of a problem with win 2000 server?!?
Just wondering any feedback would be appreciated