General discussion

Locked

Group Policy and the Administrator

By jon ·
I am using Microsoft's GPMC to manage group policy and have run into a problem.

After a few days of running without fail, suddenly, the domain administrative account has become quite restricted in what it can and cannot do. I am unable to create folders on the dekstop on the server itself.

I have scoured the policies and find nothing that would prevent me from doing this.

Also, if I login to a workstation (XP Pro) using the domain administrative account, I cannot see the screen saver tab and if I set the registry entry for the tab so it re-appears, the actual screen saver cannot be changed.

How do I ensure that the administrative user and the server itself NEVER have policy applied to them?

This conversation is currently closed to new comments.

2 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by CG IT In reply to Group Policy and the Admi ...

do not edit the default domain Group Policy.


a better way to do GP is to create an OU. Collect users or computers you want the policy to apply into the OU, then attack the GPO to the OU. Only those users or computers in the OU have the GPO applied.

Collapse -

by jon In reply to Group Policy and the Admi ...

Good advice...however, I'm still stuck with this problem. I have restored the default domain policy to its original state EXCEPT for the redirection of folders.

I'll work on that at a later time.

If I delete my profile (The administrator has a roaming profile) will it possibly clear out the ntuser.pol file and restore my access as the admin?

Back to Windows Forum
2 total posts (Page 1 of 1)  

Related Forums