Group Policy issues

From: John (jonashbaugh@hotmail.com)
Date: 10/04/02 

From: "John" <jonashbaugh@hotmail.com>
Date: Thu, 3 Oct 2002 15:33:22 -0700

 Hi. I am trying to tweak the policy settings with respect to power users
and administrators. This is for a laptop computer that will be used at home
with an ISP connection that the office doesn't know. I am having difficulty
trying to get the power users to be able to:
1. Install Automatic Windows Updates.
2. Configure the IP settings.

For a work around I could give someone Admin rights for a day cause I have
the admin password change daily, however if this is the only way around
these issues could someone tell me if there is an option to disable the add
users. This way if/when a person logs in as the admin they cannot create
another admin user. So in simple terms if you can help me with

A. Allow a power user to
    1. Install Automatic Windows Updates.
    2. Configure the IP settings.

or B. Admin option
    1. Disable adding new users or change current users groups

Also I want to disable the control panel as well for normal users and not
the admin. However when I make the control panel disabled it does it for all
users. Someone mentioned about the ntuser32.Dat file being renamed to
ntuser32.man but that does not work any other ideas on this would be great.
Thanks in advance for your time.

Relevant Pages

  • Re: Group Policy issues
    ... Well then the last resort is to hide the controls off of control panel I ... >> trying to get the power users to be able to: ... > As far as I know, you need to be administrator for this as well. ... >> For a work around I could give someone Admin rights for a day cause I ...
    (microsoft.public.win2000.security)
  • Re: Which user group for user workstations ?
    ... Administrator to Power Users and basic users. ... settings for settings, but it is dependent on the service to be running. ... I don't see the need for admin ...
    (microsoft.public.windows.server.sbs)
  • Re: non-administrator cannot run software
    ... First of all XP is an admin dream compared to the 95 kernal operating ... - You have full control of the resources on the server but the ... You say that power users run fine and users don't - the difference is ...
    (microsoft.public.windowsxp.security_admin)
  • Re: under a domain, how do i give users full control of their workstat
    ... There isn't an automated way to make one user a local admin of one ... means that you need to automate the things that need admin rights, ... settings that you can set on the PC. ... Is it done though Group Policies? ...
    (microsoft.public.windows.server.active_directory)
  • Re: AD and policies affecting User
    ... your settings there rather than in either of the default GPOs ... do want unavailable to the machine local admin. ... Microsoft MVP (Windows Server System: ...
    (microsoft.public.windows.group_policy)