Group Policy

The key phrase here is:

"no other user with admin rights".

If they have admin right they are an admin and as such can edit GP.

You can set perrmissions for non-admin though:

http://support.microsoft.com/kb/q221577/

Good Luck,

razz

I do recall from the past a program that would let you hide specific files and directories and it was password controlled. I am having a little trouble recalling where I found it, but believe that I may have gotten it off of http://www.snapfiles.com You may want to take a look at www.snapfiles.com Even if you don't find what you want, this site is a tremendous resource for free and low cost software.

Is there a possibility that you could grant "power user" rights instead of administrative rights to the restricted administrator? Or would this offer enough functionality? However, you will still need another program to hide things.

You can make the group policy directory read only, then it cannot be changed. but an administrator could change it back again if they knew what the problem was.

c:\winnt\system32\group policy (right click and deny all)

You could also go into advanced and remove the administrator from the permissions, but you would then have to have a group policy account with rights to that dir.

hope that helps

YOu cant hide it,
you can deny it.
in ADS, right click the user (or admin person)
goto properties, security, advanced, effective permissions, and set (uncheck) what you dont want them to do. MS has a GPManagement tool whereby any ads domain user can in anycase check up on your GPO, better make them pretty

This question was closed by the author