I have configured a number of settings using Administrative Templates but I
do not want them applied to local administrators. So far I have no luck, can
anyone help me ?
The environment is Windows XP SP3, no domain. We are talking about a
stand-alone PC.
I have tried setting ACL's on %windir%\System32\GroupPolicy but, although
this does work, it has the nasty side effect that nobody can use MMC.EXE
anymore so that is no solution. I can't image that things like "Prevent use
of Control Panel" can only be applied to everyone or noone. That makes it
fairly useless I would think. Anyway, I cant seem to find anything that can
help except 1000+ pages saying this is not supported on XP (Vista has a
non-admin Local Group Policy).
Re: GPO on TCPIP settings? ... I wont to deny all domain users and Local administrators the ability to ... Which GPO settings are for this responsible? ... I would suggest to remove their user accounts from the local administrators group on their workstations for your and the company's peace of mind. ... This will also reduce support calls for accidental changes, deletions, and the fact that viruses and spyware can install under their user accounts. ... (microsoft.public.windows.server.active_directory)
Re: Undo GPOs ... but ensure that all the affected settings from the GPO are returned to the pre-existing state for the Domain, Member Servers, DC's and XP Clients....which is the settings for a newly created domain. ... If it's only some testing with "Administrative Templates" that shipped with Windows, you can simple create new OU, block inheritance at that OU, put all machines and users in there and wait for them to apply the policy. ... out-of-the-box settings for a new AD domain (are there MS default .inf templates for DC's, Member Servers, Domains, and XP Clients?). ... (microsoft.public.windows.group_policy)
RE: Accidental deletion of user ... When you create the new user, you can add them to the local administrators... | Sender: "Tad"... | Subject: Accidental deletion of user ... | previous settings to this user (or to the administrator ... (microsoft.public.win2000.security)
Re: How to Disable the Unused Section of Group Policy Settings ... do this thru removing administrative templates... this does nothing to the login process but it does speed up replication between DC's and keeps the size down of the sysvol folder ... policy won't help you when clients process the GPOs as the ADM template files aren't downloaded by the clients - it's the Registry.POL file that already only contains the settings defined in the GPO. ... make an image for your workstations, install commonly used/deployed software, apply all current updates, clean up left over log files, uninstall packages, defrag the system drive and use sysprep ... (microsoft.public.windows.group_policy)
Re: Security Policy Templates? ... An .adm file defines the ... > property page the Group Policy Object Editor will display to allow the ... > administrator to manage its settings.... You have how ever write own Administrative Templates.... (microsoft.public.windows.server.active_directory)
