none
allow administrator access using GPO RRS feed

  • Question

  • Hi There,

    I am trying to use GPO to deny users access to certain items in windows (control panel, run etc). The problem I am having is every time I enable a policy to disallow something it also affects the Administrator account too. I have the Domain Admin security group in delegation with edit, delete, modify etc and I have even put the Administrator account in the delegation as well but that does not seem to help the issue. 

    Anybody have any suggestions? Thanks in advance

    Sunday, March 4, 2012 3:23 PM

Answers

  • Hello,

    Are the applied group policy settings User Configuration or Computer Configuration ones?

    If they are User Configuration ones then please proceed like that:

    • Run gpmc.msc and select your group policy
    • In the Delegation tab, grant the Administrator account Deny for Apply group policy permission

    If this is a computer configuration then have a look to that: http://support.microsoft.com/kb/231287

    More if you ask them here: http://social.technet.microsoft.com/Forums/en-US/winserverGP/threads



    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.   

    Microsoft Student Partner 2010 / 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations
    Microsoft Certified IT Professional: Enterprise Administrator
    Microsoft Certified IT Professional: Server Administrator
    Microsoft Certified Trainer

    • Proposed as answer by Soh.M Wednesday, March 7, 2012 2:52 AM
    • Marked as answer by Kevin Remde Sunday, March 25, 2012 11:43 AM
    Sunday, March 4, 2012 3:30 PM