Re: Group policy editor

From: Allen (Allen.Pagenkopf@qtiworld.com)
Date: 07/11/02


From: "Allen" <Allen.Pagenkopf@qtiworld.com>
Date: Thu, 11 Jul 2002 14:41:37 -0500


Where is XP group policy and template files located? Is this on the XP CD?

Allen
"Roger Abell [MVP]" <mvpNOSPAM@asu.edu> wrote in message
news:#zZWrM1JCHA.2508@tkmsftngp08...
> Simply Deny the admin Full Control on the directory
> %windir%\system32\GroupPolicy
> This will prevent the policies from being applied to that
> account. It will also prevent the account from being able
> to modify policies. So, when you want to adjust the
> policy settings, log in as that admin account, remove the
> Deny, edit the policies, reset the Deny, log out and in
> as the other account. Iterate as needed.
> I would strongly suggest that you have two admin accounts
> that are exempted from policy application in this way. Then,
> should you forget to reset the Deny during an edit, you will
> have another way to get back into contol of the system.
>
> --
> Roger Abell
> MS MVP (Windows Platform), MCSE, MCDBA
> Associate Expert - Windows XP ExpertZone
> http://www.microsoft.com/windowsxp/expertzone
>
> "Long Beach Public Library Staff" <longbeach@nassaulibrary.org> wrote in
> message news:Oi#r96QJCHA.2480@tkmsftngp11...
> > I work in a library and am trying to secure some pc's NOT ON A NETWORK,
> > using the Group Policy editor. I have two active accounts, the default
> > Administrator account, and one i created called "Patron". I have the pc
> set
> > up to automatically log on into that account, but my problem is that
while
> I
> > am setting my restrictions with GPE, while logged on as an Admin, those
> > restrictions are affecting that account. I DON'T want any settings to
> affect
> > the admin account, how can I do this? Being a librarian it amazes me
how
> > little information regarding this tool is not published. I keep getting
> > different answers that dont' work in the end.
> >
> > Thanks for your help!
> >
> > Philip Boccia
> > Long Beach Public Library
> > www.nassaulibrary.org/longbeach
> >
> >
> >
>
>



Relevant Pages

  • Re: Local Admin disables by its own
    ... What do you mean that his local admin is disabled?? ... account to be disable by Group Policy but that should have nothing to do ... security option for accounts: administrator account status. ... Group Policy is applying that setting. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Group Policy - Locked myself out
    ... All you need to do is set a Deny of Full for Administrators on ... Then, log off and back on as an admin, remove the Deny, and ... > I set the Group Policy to lockout certain features (eg. ... > Control Panel, Snap-Ins, etc), and acidentally locked my ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Administrator Locked out
    ... an admin, remove the Deny and promptly use gpedit to revert the ... Simplify Group Policy Troubleshooting with the NEW GPExpert ... out the administrator from entering into the Group Policy Object ...
    (microsoft.public.windows.group_policy)
  • Re: Stand alone Windows XP security
    ... create an new admin account, NewAdm ... remove the deny to Administrators group from GroupPolicy ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Group policy editor
    ... Simply Deny the admin Full Control on the directory ... It will also prevent the account from being able ... to modify policies. ...
    (microsoft.public.windowsxp.security_admin)