Windows Forum

Ask something
Discussion Locked

group policy affects administrator acct

0 helpful
5 replies

by cole_sherry

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have a active directory tree that does not have ou's. It contains the defaults, builtins, computers, users. All my users including administrator are under the users folder. I have setup a group policy at the domain level. (.org) but I do not know how to keep it from affecting the administrator account. example: disable control panel, disables it for administrator also. How do I exclude the administrator account? I have a local lan that doesn't really need ou's.

5 replies

by eau

You may try to go to your Administrator Group and put a check mark on Apply Group Policy Deni.

Hope this help.

by mdavis

Open Active Directory Users and Computers. Go to the properties for your domain. Go to the group policy tab. Select the policy that you don't want the administrators to get and click the properties button. Select the security tab (if there is nosecurity tab, you need to enable Advanced Features from the view menu). Add either the administrator account, administrators group, or Domain Admins group, then select the deny check box next to "Apply Group Policy". All users except the user/group that you've denied should process the GPO. Good luck.

by cole_sherry

Thanks, I had stumbled on the answer in the resource kit for 2000. You answer was detailed which was what I needed.

This discussion is closed to new replies.