Re: Configuring MMC

From: Torgeir Bakken (Torgeir.Bakken-spam@hydro.com)
Date: 09/26/02 

From: Torgeir Bakken <Torgeir.Bakken-spam@hydro.com>
Date: Thu, 26 Sep 2002 23:54:43 +0200

Rob wrote:

> When configuring the MMC console to lockdown what user's
> are able to do, is there a way to have does effects not
> hinder the Adminstrator account with the same restrictions?

Control it through the access rights to the "Group Policy" folder:

From: Cazz (ditto@again.ditto)
Subject: How to lock down almost everything for 1 user or group?
Newsgroups: microsoft.public.windowsxp.security_admin
Date: 2002-02-22 17:52:38 PST
http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&oe=UTF-8&th=59807abf6aa723ed

--
torgeir

Relevant Pages

  • Re: Configuring MMC
    ... >Rob wrote: ... >> When configuring the MMC console to lockdown what user's ...
    (microsoft.public.win2000.security)
  • Re: locking desktops and more
    ... If you apply the GPO to the OU which contains the user accounts, ... > users and apply the lockdown to that OU. ... >>> If you are in a domain, I would suggest that group policy is ...
    (microsoft.public.windows.terminal_services)
  • Re: Combining Local and Group Policies
    ... systems to the domain at installation time, so any value in configuring local ... policies may be further diminished. ... Script Group Policy Settings with the GPExpert Scripting Toolkit for ...
    (microsoft.public.windows.group_policy)
  • Re: Changing users from administrators to users
    ... "Users" group without physicaly touching the machine" ... I have a large network and trying to lockdown the PC's. ... Group policy even though we're on Novell to lock down some things, ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Using group policies to disable AD user accounts
    ... Group Policy is for configuring the desktop environment for ... James. ... is there a way in a Windows 2003 domain to apply a group policy that will ... disable the AD user accounts to a OU? ...
    (microsoft.public.windows.server.active_directory)