Re: Managing User Profiles With Group Policies

From: Seeker (anonymous_at_discussions.microsoft.com)
Date: 03/30/04 

Date: Tue, 30 Mar 2004 14:30:05 -0500

There are two issues here; one is whether the policy is user based or
machine based. If user based, then yes an Administrator can log in and
change settings; however these would be temporary since the next time the
user logs in he would be locked out again. You have not mentioned it but I
gather that you intend to copy the administrator's profile onto the users'
for the changes to stick?

If the policy is machine based, again you can override temporarily the with
a local Admin account (run secpol.msc), but the Group Policy would come back
next time the system restarts.

Also look on the Group Policy on the Domain Controller and see what OU it is
applicable to; it may give you more ideas.

"Ronnie" <randersen@ci.livonia.mi.us> wrote in message
news:15bcb01c4168b$e4af1080$a301280a@phx.gbl...
> Is it possible to manage a user profile that is locked
> down by group policies logged in as an administrator?
> For instance:
> UserA is locked down using group policies from a Windows
> 2000 network. The Control Panel is locked out and also
> Internet Explorer properties. Can an administrator log
> on to UserA's computer and make adjustments to the
> settings in UserA's profile that are locked out by the
> group policies?

Relevant Pages

  • Managing User Profiles With Group Policies
    ... Is it possible to manage a user profile that is locked ... down by group policies logged in as an administrator? ... UserA is locked down using group policies from a Windows ...
    (microsoft.public.win2000.group_policy)
  • Re: Must all users be administrators?
    ... The familiar look of the AD objects tree you see in Group Policy Editor is ... This seems modestly confusing to an SBS Administrator because there's very ... those rights happen to be nearly unlimited. ... sit a workstation logged on as the Local Administrator, by default, there ...
    (microsoft.public.windows.server.sbs)
  • Re: The local policy of this system does not permit you to logon i
    ... Security policies were propagated with warning. ... Error 0x534 occurs when a user account in one or more Group Policy objects ... I have checked the security policies & the administrator profile is not ...
    (microsoft.public.windows.server.sbs)
  • Re: Administrator unable to log on Interactively
    ... Firstly i tried accessing the domain controller C drive ... I think the policy has been changed in the "local security ... >> administrator is not able to log on interactively. ... >Interactive Logon setting takes precedence over the Allow ...
    (microsoft.public.win2000.security)
  • Re: Administrator is not the "Boss" on this machine.
    ... policy, I'd see two columns, one for "setting" ... > you can not run that command you may not be logged on as an administrator. ... > If you messed with Group Policy settings for user configuration the solution above ...
    (microsoft.public.win2000.security)