how do I allow administrator to have privilages in gpos RRS feed

  • Question

  • Hi There,

    I am using windows server 2008 and I am creating some gpo's. I however dont want the Administrator to be locked out of the stuff I am denying users access too as well. Is there a way I can prevent this? I am thinking if I put him under the delegation tab in GPO that should allow the user account to work with no restrictions but not sure.

    Friday, February 17, 2012 8:19 PM


  • When you create a GPO you will see that you have, by default, a "Security Filtering" that applies the GPO to all Authenticated Users.  You can modify that to make the GPO apply to specific security groups if you choose, and leave out the administrators (in your case).


    Kevin Remde US DPE - IT Evangelism - Microsoft Corporation http://blogs.technet.com/kevinremde http://twitter.com/kevinremde

    • Proposed as answer by Kevin Remde Saturday, February 18, 2012 12:47 PM
    • Marked as answer by Kevin Remde Wednesday, February 22, 2012 12:22 PM
    Saturday, February 18, 2012 12:47 PM