General discussion

Locked

Group Policy

By Sameh Fouad ·
In a Win2k professional machine, I (as an administrator) tried to do the following using Group Policy:
1) Prohibit access to the Network Connection Wizard.
2) Remove Network & Dialup Connection from the Start menu.

But when I logged off and on again, I found myself affected by this policy too. Is there a way to tell the system to to execlude the administrators group from this policy?

Also I want to know a better way (even by using the Group Policy) to prevent users other than the administrators group from dialing to the internet.
Thanks

This conversation is currently closed to new comments.

12 total posts (Page 1 of 2)   01 | 02   Next
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Group Policy

by ewgny In reply to Group Policy

Local group policies apply to all users. If you have a Win2k Domain you should create policies and apply them to an OU. If not, you can use 3rd party lockdown tools like winselect. Or you can save the mmc console for your local group policy's to your desktop for example, and remove regular users permissions. Then when you want to adjust settings go into the mmc undo the specific policy, change settings, reapply the GP restrictions. Just be careful not to paint yourself into a corner with local Group Policies.

Collapse -

Group Policy

by ewgny In reply to Group Policy

Winselect can be found at www.deepfreezeusa.com
While you're their take a looke at deepfreeze

Collapse -

Group Policy

by Sameh Fouad In reply to Group Policy

Poster rated this answer

Collapse -

Group Policy

by John Boy In reply to Group Policy

In AD the policy will apply to all OU's and users within them down the tree just like heirarchical security permissions. If you have done this in the default domain policy it will affect all users.

Create another group policy further down the AD tree to apply it to only that folder and its subfolders (OU's). If neccessary create an OU down the tree first to do this. Move any users and computers you wish it to apply to within this folder.

Good luck

Collapse -

Group Policy

by Sameh Fouad In reply to Group Policy

I have no AD, I am talking about a stand alone Windows 2000 Professional, not a AD domain.

Collapse -

Group Policy

by BeerMonster In reply to Group Policy

Hi,
Search at www.microsoft.com/technet for article Q293655 - this disusses how to apply local policy to everyone but the admin...

Collapse -

Group Policy

by Sameh Fouad In reply to Group Policy

No such article Q293655

Collapse -

Group Policy

by Sameh Fouad In reply to Group Policy

No such article Q293655

Collapse -

Group Policy

by BeerMonster In reply to Group Policy

Hi,
Search at www.microsoft.com/technet for article Q293655 - this disusses how to apply local policy to everyone but the admin...

Collapse -

Group Policy

by Sameh Fouad In reply to Group Policy

No such article Q293655

Back to Windows Forum
12 total posts (Page 1 of 2)   01 | 02   Next

Related Discussions

Related Forums