Discussion Locked

User Policy in Win2k Pro.

0 helpful
7 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi,

I am trying to implement user policy to restrict access to various properties in Win2k Pro. I used gpedit.msc "User Configuration->Admnistrative Templates" to control the user access. I logged on with administrator rights and enabled the "Control Panel->Disable Control Panel" and logged off and logged on with a user account. It is okay I don't see the Control Panel, however, when I logged on back with Administrator rights there again the Control Panel is missing. I understand the above configuration should only apply to users. Am I doing something wrong here.

Pls guide me implement the user policy properly.

Regards,

Minhaj.

7 replies

by gigelul

Hi,
I don't have a Win2k box, but in WinNT to avoid this issue I added in policy the admin account and for this I remove all restrictions (default the restrictions will apply to all users also to admin account)

by beermonster

Hi,
The user restrictions that you have chosen will be applied to all users, including admins. In order to stop this happening, refer to article number Q293655

"How to Apply Local Policies to all Users Except Administrators"

search for that reference on www.microsoft.com/technet

Hope this helps...

by mvesce

My network currently has policies implemented that restrict all the daily users from adjust settings in control panel. The simplest way I found to deploy it was to create and organizational unit named Local users and move all peer users into this OU. At that point in properties of the Local Users OU created, create a new Group Policy for this OU. Any policies you set here will only apply to the users in it. So as long as you don't put the administrator user name in this OU then you will be fine. Most likely what you are doing modifying a default domain policy which will effect all users including administrator users. Hope this helps, good luck

This discussion is closed to new replies.