Re: Group policy problem (XP alone and XP with NT server)

From: Tad Menert (menertta_at_webaccess.net)
Date: 05/27/05


Date: Fri, 27 May 2005 09:52:41 -0600

Thanks for your help. I'm getting somewhere, but sometimes it's a vicious
circle, as when I try to remove my computer and deny the administrator read
permissions I might force myself into a blind corner :)

It was a great help, though

Tad

two options:
>
> Here's Microsoft's procedure:
>
> http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B293655
>
> Here's a method that uses NTFS permissions:
>
> http://www.theeldergeek.com/gp07.htm
>
> The second one is very simple to implement. You set up your group policy
> and then set the permissions on the C:\Windows\System32\GroupPolicy folder
> to deny read permissions for the Administrators group.
>
> Good luck
>
> Nepatsfan
>



Relevant Pages

  • RE: services running in windows domain (winXP clients)
    ... registry changes and permissions. ... i mean if someone is administrator can change the ... (Maybe create a group policy setting this ...
    (Focus-Microsoft)
  • Re: Run application on remote login
    ... going off the top of my head) not read permissions. ... Microsoft MVP - Terminal Services ... Policy in group policy management where administrators is listed, ... Administrator Accounts and Selected Users in Windows Server ...
    (microsoft.public.windows.terminal_services)
  • Re: WinXP Pro "Users" Group Restrictions Affect Administrator Accounts
    ... >then removed the Users group from the permissions. ... >administrator password that's in the text file, ... under an account with just regular User ... >Thanks for the tip on the special deny group. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: WinXP Pro "Users" Group Restrictions Affect Administrator Accounts
    ... >then removed the Users group from the permissions. ... >runas to run individual programs with administrator privileges. ... >Outlook, under an account with just regular User privileges, as these ... >Thanks for the tip on the special deny group. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: HELP- I locked myself out
    ... invalid permissions it may correct the permissions. ... I don't mess with using DENY to deny things. ... I assumed that if I am an administrator and if I have full control, ...
    (microsoft.public.windowsxp.general)