Welcome to WinForumz.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

Group Policy

 
   Windows XP Arc1 (Home) -> Security Admin RSS
Next:  error with ntdll.dll  
Author Message
Craig6

External


Since: Jun 28, 2004
Posts: 13



(Msg. 1) Posted: Tue Feb 08, 2005 9:37 pm
Post subject: Group Policy
Archived from groups: microsoft>public>windowsxp>security_admin (more info?)

Is there any way to have the settings in group policy not affect the
Administrators account(s).

I'm new to all of this and was trying to restrict the Limited account on my
pc however any changes that I made under the group policy settings are
affecting the administrator account aswell.

i.e. I restricted the control panel to only display certain icons and while
logged into my admin account, they were restricted.

Thanks

 >> Stay informed about: Group Policy 
Back to top
Login to vote
mcp1

External


Since: Dec 13, 2004
Posts: 13



(Msg. 2) Posted: Wed Feb 09, 2005 12:13 am
Post subject: RE: Group Policy [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Put the administrator account in another OU or set the "Read" and "Apply
Group Policy" permissions on the Group Policy Object (GPO) to a specific
target group only (containing all users except the administrators).

Do let us know if this helps. Thanks!


"Craig" wrote:

 > Is there any way to have the settings in group policy not affect the
 > Administrators account(s).
 >
 > I'm new to all of this and was trying to restrict the Limited account on my
 > pc however any changes that I made under the group policy settings are
 > affecting the administrator account aswell.
 >
 > i.e. I restricted the control panel to only display certain icons and while
 > logged into my admin account, they were restricted.
 >
 > Thanks<!-- ~MESSAGE_AFTER~ -->

 >> Stay informed about: Group Policy 
Back to top
Login to vote
Craig6

External


Since: Jun 28, 2004
Posts: 13



(Msg. 3) Posted: Wed Feb 09, 2005 5:41 am
Post subject: RE: Group Policy [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Thank you for the reply.

I apologize for my ignorance here, but how exactly would I do that? Is it
in the group policy window or somewhere else? I read a way of doing it by
using mmc and making changes, then logging into all the accounts so they take
effect, then logging back into the admin account and changing some registry
stuff but it seemed like a lot of work for what should be a fairly simple
task.

I should mention that I'm running Win XP Pro SP2 and that this is the first
time I have ever played around with Group Policy stuff.

"Desmond Lee" wrote:

 > Put the administrator account in another OU or set the "Read" and "Apply
 > Group Policy" permissions on the Group Policy Object (GPO) to a specific
 > target group only (containing all users except the administrators).
 >
 > Do let us know if this helps. Thanks!
 >
 >
 > "Craig" wrote:
 >
  > > Is there any way to have the settings in group policy not affect the
  > > Administrators account(s).
  > >
  > > I'm new to all of this and was trying to restrict the Limited account on my
  > > pc however any changes that I made under the group policy settings are
  > > affecting the administrator account aswell.
  > >
  > > i.e. I restricted the control panel to only display certain icons and while
  > > logged into my admin account, they were restricted.
  > >
  > > Thanks<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Group Policy 
Back to top
Login to vote
mcp1

External


Since: Dec 13, 2004
Posts: 13



(Msg. 4) Posted: Wed Feb 09, 2005 6:43 am
Post subject: RE: Group Policy [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

"Craig" wrote:

 > I apologize for my ignorance here, but how exactly would I do that? Is it

Do not worry about that. Many of us would try our best to help to the best
of our knowledge and ability.


 > in the group policy window or somewhere else? I read a way of doing it by
 > using mmc and making changes, then logging into all the accounts so they take

Do you have an Active Directory network? If yes, all such changes revolve
around Group Policy Objects that are typically set at an Organizational Unit
(OU) level using "Active Directory Users & Computers" i.e. highlight the OU >
Properties > Group Properties > New / Add > Edit ... > configure the settings
you need.


 > effect, then logging back into the admin account and changing some registry
 > stuff but it seemed like a lot of work for what should be a fairly simple
 > task.
 >

This would be necessary if no Active Directory infrastructure exists.


 > I should mention that I'm running Win XP Pro SP2 and that this is the first
 > time I have ever played around with Group Policy stuff.
 >

Group Policy is a very complex topic so take your time to learn and pick it
up. Try to setup a test environment to familiarize with concepts and run
extensive tests before putting it to production.

Do let us know if this helps. Thanks!<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Group Policy 
Back to top
Login to vote
Craig6

External


Since: Jun 28, 2004
Posts: 13



(Msg. 5) Posted: Wed Feb 09, 2005 8:59 am
Post subject: RE: Group Policy [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

"Desmond Lee" wrote:


 > Do you have an Active Directory network? If yes, all such changes revolve
 > around Group Policy Objects that are typically set at an Organizational Unit
 > (OU) level using "Active Directory Users & Computers" i.e. highlight the OU >
 > Properties > Group Properties > New / Add > Edit ... > configure the settings
 > you need.

Currently this is just on a local machine with no other pc's connected. I
believe that in the help files I clicked on open "Active Directory Users &
Computers" and a window popped up stating the program could not open.


 > This would be necessary if no Active Directory infrastructure exists.

I don't believe that I have one.... so.. How would I set up an Active
Directory?


 > Group Policy is a very complex topic so take your time to learn and pick it
 > up. Try to setup a test environment to familiarize with concepts and run
 > extensive tests before putting it to production.
 >
 > Do let us know if this helps. Thanks!

Everything is helping thanks. Since I'm running on only one PC currently it
pretty much is a test environment. I've only started cutting my teeth on the
basic stuff (ie limiting control panel and stuff).<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Group Policy 
Back to top
Login to vote
Display posts from previous:   
Related Topics:
Group policy local group not admin as well ? - I'm a newbie who just made a group policy for a user and changed local settings, this changed the administrator settings as well, how do I change user1 (power user) local settings on a workgroup computer without admin being changed? I have read heaps...

Group Policy - Some time ago I disabled access to group policy (for all users including the Administrator) by editting the registry. I can't remember why I did...could it have had something to do with denying access to messenger to some users? I also can't..

Group Policy - A user enabled the restrict access to the command prompt policy. Is there any way to disable this?

Group Policy - Managing many Students is not always a simple process. Is there a way to add the Domain logged on user to the Local Debugging Users Group through a script preferably Group Policty? The students may not always use the same computer so I need this to..

Group Policy Problems... - After installing SP2 on XP Pro I cannot get the group policy editor to run.... Tried to run also by going to run and entering "gpedit.msc" and I get an error msg stating that the "Snap-In failed to initialize" Name: Group Policy ..
   Windows XP Arc1 (Home) -> Security Admin All times are: Eastern Time (US & Canada) (change)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You can edit your posts in this forum
You can delete your posts in this forum
You can vote in polls in this forum

Categories:
 Windows XP
 Windows Vista!
 Win 2000/NT/98/ME


[ Contact us | Terms of Service/Privacy Policy ]