Windows Forum·65,705 discussions

Group Policies

Locked

K, so I’m a newbie at this and all help is appreciated. I’m trying to set policies on a local PC running Windows XP Pro. Basically, I want to restrict access to certain features such as the run command, deleting desktop items, etc. I have implemented the policies, the problem is that even the local administrator account on the PC has lost the priviledges. My question is, how do I assign local policies on the machine for certain groups without affecting other groups such as the Administrator group?

Topic

Reply To: Group Policies

In reply to Group Policies

In a way, you can’t. But there is a work around. As the administrator you need to be able to view hidden files and folders, and disable simple file sharing (both under folder options and view.) Simple file sharing is the bottom.
Once that is done, browse to C:\WINDOWS\system32 and find the folder titled Group Policy. Right click and select properties. Under the security tab, add the group or user that you want to exclude from being restricted. Highlight the group and deny read access. Log off and then back on.
The way this works is: if the account can’t read the GPO’s located in the folder, it can’t apply them to the account.

Reply To: Group Policies

In reply to Reply To: Group Policies

If you try it, The only thing it does is prevent the account or group (administrator) to not load the group policy. Which means the administrator account is immune to the policy and will have the default administrator rights spelled out by windows xp. If you have changed the branding of IE using gpedit, it will not change for any other user as long as they have read access to the group policy. I manage over 100 workstations using this and it works well. It is not a folder policy other than preventing the administrator from reading that folder.

Reply To: Group Policies

In reply to Reply To: Group Policies

http://www.theeldergeek.com/group_policy_for_windows_xp_prof.htm

You might want to read this.

Brian

Reply To: Group Policies

In reply to Reply To: Group Policies

Thanks Brian, at first I misunderstood what you were saying but now that I read it more carefully and try it, this works.

Reply To: Group Policies

In reply to Group Policies

K, but what about policies that don’t apply to folders, for instance customization done to internet explorer and things like that.

Reply To: Group Policies

In reply to Group Policies

Point value changed by question poster. I increase th epoints because I think this has turned out to be a tougher question than I originally thought and I really want an answer!

Reply To: Group Policies

In reply to Group Policies

This question was closed by the author

[Author]

Replies