Re: group policy

From: jan erik (jan_erik@law.com)
Date: 01/25/02 

From: jan_erik@law.com (jan erik)
Date: 24 Jan 2002 18:28:27 -0800

Christoph Hoenscheid <hoeni@sdf.lonestar.org> wrote in message news:<Pine.NEB.4.33.0201191953100.17942-100000@sdf.lonestar.org>...
> Hello!
>
> is there anybody out there, who knows, how to prevent group policies set
> in Windows 2000 on a single machine from being applied to the
> Administrator account?
>
> Thanks in advance
>
> Christoph

Filter the scope of the gpo by clicking properties->security.
You will then see the access control list (ACL) for your GPO. This ACL
is where you delegate the control over the GPO.
 
Remove Authenticated Users from the ACL on the GPO because
Administrators are members of this group.

Filter the scope further by adding/deleting apropriate groups...

a great link: http://www.microsoft.com/technet/treeview/default.asp?url=/TechNet/prodtechnol/winxppro/proddocs/Filter.asp

-jan erik-

Relevant Pages

  • Re: Opening Ports on Firewall
    ... Take a look on the tab "scope" on the GPO. ... than "Authenticated Users" than there is a filter ... ...
    (microsoft.public.win2000.group_policy)
  • GPO NTFS rights only applied with "gpupdate / force"
    ... moved document does not inherit the ACL from the new parent directory. ... Have seen the when specifying directory permissions in a GPO, ... But we have seen the ACL's of the child objects are only replaced when the ...
    (microsoft.public.windows.group_policy)
  • Re: Elegante Art, um User surfen zu verbieten?
    ... Andere Möglichkeit wäre, in einer GPO einen Proxyserver zu definieren, den ... Proxyeinstellung zu ändern. ... Also noch duie ACL von iexplorer.exe entsprechend ... Das kann der Router auch, ...
    (microsoft.public.de.german.windows.terminaldienste)
  • Re: GPO NEED HELP
    ... from the ACL of a GPO. ... The owner, i.e., the creator, of the GPO should still be able to change ... Owners of objects can always change permissions even if ...
    (microsoft.public.win2000.active_directory)
  • Re: policy by group membership? i thought it wasnt possible?
    ... inside the security group? ... Otherwise you can filter what ever you want, ... You can use security groups to filter inside one OU (or scope of the GPO) ...
    (microsoft.public.windows.group_policy)