"please contact your system administrator"... I *am* the administrator

From: Esta Vida Nueva (vamos_at_a.bailar)
Date: 04/26/04

  • Next message: Shenan Stanley: "Re: Unwanted files" 
    Date: Sun, 25 Apr 2004 23:24:23 +0100

    I am trying to lock-down a PC running XP Pro for a friend, as their oldest
    son is a little bit funny and keeps trying to lock the rest of the family
    out (and once succeeded so it took forever trying to hack in).

    I have now wiped the machine clear and built it from scratch, and am using
    Group Policy via Start > run > "gpedit.msc" to enable security settings.

    Some of the settings I have applied, such as disabling the DOS prompt are
    applying to Administrator as well, so even when I am logged on as
    Administrator, the system is not allowing access to the Console.

    If anyone can direct me as to configuring this to allow Administrator to be
    "above" the settings enacted I would appreciate this. I remember when using
    Poledit on Windows95 you would create a policy for each user... this would
    be helpful too if possible. 

    -- 
Steve
mhm28x28
  • Next message: Shenan Stanley: "Re: Unwanted files"

    Relevant Pages

    • Re: Is there a way to set a local policy to disable adhoc, non Act
      ... policy via GPMC it requires you to log in as a domain administrator. ... +Software Settings ... Under Windows Settings there is a Security Settings, ... another Group Policy MVP - he posted these steps on ...
      (microsoft.public.windows.group_policy)
    • RE: Disabling sharing and group policies
      ... If you disable Group Policy loopback mode in domain-level GPO, ... Yes, administrator can modify some settings, but these settings will ... Disabling sharing and group policies ...
      (Focus-Microsoft)
    • Re: Bypassing domain and OU GPO settings using the Security Configuration and Analysis MMC
      ... That Group Policy is a template of settings being pushed to a machine, is the Client Side Extensions just basically Local Group Policy, in other words? ... An Adminis an Admin is an Admin. ... Thats the reason why he is an Administrator. ...
      (microsoft.public.windows.group_policy)
    • Re: Timed lockout set by Admin in Work Group
      ... You can do that with Group Policy. ... The only settings that need to be enabled are password ... protect the screen saver and screen saver timeout. ... administrator can use gpedit.msc however. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: locking down Win2k
      ... lock down a workstation. ... You will have to configure group policy on each ... workstation by running mmc in the run box and adding the group policy snap ... group policy remotely as an administrator from ...
      (microsoft.public.win2000.security)