Security

Ask something
Discussion Locked

group pilices in windows xp pro

0 helpful
3 replies

by pcpolice

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
why is it when iam logged as the administrator on a stand alone computer, which has a few local users.When i apply group policies it also effects my administrator account.Logic tells me as an administrator i have full acess to the computer and these policies should only effect the other users.What iam i doing wrong or not doing right?

3 replies

by cg it

well group policy has 2 effects. computer and user. Computer configuration effects everyone including the admin account [though you have full access to change it] User configuration effects users and if you just create a local policy without specifing a group to which is applies, it applies to all users [again even the admin account though admins can change it]. [local user account and power user accounts cant change the group policy that is in effect].

by cg it

so you need to lump users into a group, then create a GPO with the settings you want then apply that to the group. leave out the admin account from the group. then the GP will not affect the admin account.

by cg it

BUT there's a very small, slight, miniscule, problem with GP settings create via the group policy snap in on a local XP machine. GP is an Active Directory based security tool. A stand alone XP machine doesn't run Active Directory.

This discussion is closed to new replies.