Windows Forum

Ask something
Discussion Locked

Group Policy Question

0 helpful
9 replies

by mccoyjj

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have a group policy in place that is defined at the OU level which locks down various things (no control panel, no run line, etc.) my question is; How can I change user profile specific settings as an administrator without having to lift the grouppolicy first.

9 replies

by acattr

make sure the administrator is not part of that OU. Create a seperate OU, either for the admins, or for your users.

by ekh5

policies set for the user on the workstation or local machine rule over the group policy from AD. the people that u want the group policy to apply to they can not have a locale account.

by mccoyjj

An example of what I'm trying to do is say a user has his display properties locked down, and as an admin I want to change the settings for that user. I would need to lift the policy and then log in as that user to change the settings, and then re-apply the policy afterwards. Is there any way to leave the current user logged in and somehow log in over the top of that users session as an admin and make the changes?

by greybeard770

Policies are applied in this order:
Local
Site
Domain
Parent OU
Child OU

Assuming you are not using No Override / Block Policy inheritance, the last policy applied will win.

by greybeard770

For what you are talking about, you can go into Control Panel and use the RunAs on Display to change the settings.

This discussion is closed to new replies.