General discussion

Locked

Group Policy

By syedmahmoodi135 ·
Hi,
How can i lock or hide group policy after Implementing it? so that no other user with admin rights can modify it or see is there any third party software for it

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by razz2 In reply to Group Policy

The key phrase here is:

"no other user with admin rights".

If they have admin right they are an admin and as such can edit GP.

You can set perrmissions for non-admin though:

http://support.microsoft.com/kb/q221577/

Good Luck,

razz

Collapse -

by f-178765 In reply to Group Policy

I do recall from the past a program that would let you hide specific files and directories and it was password controlled. I am having a little trouble recalling where I found it, but believe that I may have gotten it off of http://www.snapfiles.com You may want to take a look at www.snapfiles.com Even if you don't find what you want, this site is a tremendous resource for free and low cost software.

Is there a possibility that you could grant "power user" rights instead of administrative rights to the restricted administrator? Or would this offer enough functionality? However, you will still need another program to hide things.

Collapse -

by Bakasan In reply to Group Policy

You can make the group policy directory read only, then it cannot be changed. but an administrator could change it back again if they knew what the problem was.

c:\winnt\system32\group policy (right click and deny all)

You could also go into advanced and remove the administrator from the permissions, but you would then have to have a group policy account with rights to that dir.

hope that helps

Collapse -

by wdeklerk In reply to Group Policy

YOu cant hide it,
you can deny it.
in ADS, right click the user (or admin person)
goto properties, security, advanced, effective permissions, and set (uncheck) what you dont want them to do. MS has a GPManagement tool whereby any ads domain user can in anycase check up on your GPO, better make them pretty

Collapse -

by syedmahmoodi135 In reply to Group Policy

This question was closed by the author

Back to Windows Forum
5 total posts (Page 1 of 1)  

Related Discussions

Related Forums