Re: Group Policy permissions

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 09/05/03 

Date: Fri, 5 Sep 2003 02:03:22 -0700

If you wish to have policy settings applied sensitive
to what account (any you have very few such accounts)
then the method of the KB article to which Doug has
provided a link is an option.
If you have the scenario where you want the policies
you have defined applied to all accounts except a
certain account or group of accounts (an for these it is
acceptible to have no policies applied) then you can
set a Deny ACE on system32\GroupPolicy for that
account or group. If an admin is so Denied, then in
order to use that account to modify the policy settings
you need to first remove the Deny and then remember
to set it back when done. 

-- 
Roger Abell
Microsoft MVP (Windows, Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"John" <jclasca@softwaresynergy.com> wrote in message
news:1f1701c37352$e010b650$a001280a@phx.gbl...
> This is probably a very basic question.  I am trying to
> manage the security permission of the Local Computer
> Policy on a Windows XP Pro standalone laptop.  I configure
> the Group Policy object and apply it without any
> problems.  However, I would like to specify which
> users/groups the object applies to.  When I right-click on
> the "Local Computer Policy" icon and select Properties,
> only the General tab appears.  How can I obtain the
> Security tab that would allow me to configure access
> permissions?
>
> Thank you,
>
> John

Relevant Pages

  • Re: RSoP Lockout Account
    ... major part of the Domain concept is a unified and enforced security regime. ... The password policy is enforced by the computer (i.e. a domain controller ... not when the user account is authenticated by that computer. ... controllers won't have any affect on domain user accounts. ...
    (microsoft.public.win2000.group_policy)
  • Re: Problems with 529 Events
    ... Step 2: Configure account lockout policy. ... Windows Settings, double-click Security Settings, double-click Account ... The issue may occur if the remote SBS server sends broadcast ...
    (microsoft.public.windows.server.sbs)
  • Re: XP Repairing System.
    ... neglecting the fact that the 'so called' security ... then run internet from non-admin account. ... can then utilises the security features and ADS of NTFS to secure itself ... policy settings not available for FAT32, ...
    (uk.comp.homebuilt)
  • Re: webservice problem system.net.webexception
    ... first check the local system policy and make sure the local system ... account is not set as a member of the guest account since the guest ... (this is under local security settings/user rights assignment), ... Test the client on the local machine, ...
    (microsoft.public.dotnet.security)
  • Re: WK2 AD Security
    ... Well the link I referred to should be a good start on account policy but ... guest account is disabled on the domain controller in AD Users and Computers ... -- Create a password policy suitable for your needs but consider enabling ... network" setting on the domain controller or in DC Security Policy. ...
    (microsoft.public.win2000.security)