Re: Using Group Policy

From: Roger Abell [MVP] (mvpNOSPAM@asu.edu)
Date: 09/10/02 

From: "Roger Abell [MVP]" <mvpNOSPAM@asu.edu>
Date: Mon, 9 Sep 2002 21:27:36 -0700

Torgeir,

Sorry for the confusion of first reference with
first link. FYI, Once upon a time there was a KB
about manipulation the GroupPolicy ACL, but I
do not seem able to turn it up at present. 

--
Roger Abell
MS MVP (Security, Windows), MCDBA,  MCSE both
Associate Expert - Windows XP ExpertZone
http://www.microsoft.com/windowsxp/expertzone
"Torgeir Bakken" <Torgeir.Bakken-spam@hydro.com> wrote in message
news:3D7C80FF.DE8170C2@hydro.com...
> "Roger Abell [MVP]" wrote:
>
> > "Torgeir Bakken" <Torgeir.Bakken-spam@hydro.com> wrote in message
> > news:3D7BD743.6123FC3@hydro.com...
> > > "Roger Abell [MVP]" wrote:
> > >
> > > > Those methods are IMO needlessly way to complicated
> > > > of a solution for this person's stated needs.
> > > > With the method I have outlined, his few accounts are
> > > > permanently exempted from user settings in local policy
> > > > while all others are subjected to them, and, it is a simple
> > > > single permission edit.
> > >
> > > Hi
> > >
> > > Noted, but my first link actually describes the permission "trick" for
the
> > > GroupPolicy folder.
> >
> > Hello Torgeir,
> >
> > It seems you may need to review these KB articles.
> > I am recommending this individual simply use the
> > permissions on the GroupPolicy folder, not that the
> >  registry.pol file manipulation be used.
> >
> > I believe the first KB you reference was recently re-editied,
> > but never did cover use of the ACL on the GroupPolicy
> > folder, while the second KB is a reissue of the first for the
> > Windows .Net Server 2003 release.
>
> Hi
>
> The first link was not to a KB article, it was this one, and it is
describing
> how permissions on the GroupPolicy folder can be used to deny/apply local
GPO's:
>
> From: Cazz (ditto@again.ditto)
> Subject: How to lock down almost everything for 1 user or group?
> Newsgroups: microsoft.public.windowsxp.security_admin
> Date: 2002-02-22 17:52:38 PST
>
http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&oe=UTF-8&th=59807abf6aa723ed
>
>
>
> --
> torgeir
>
>
Quantcast