Re: GPO only for admins

Tech-Archive recommends: Speed Up your PC by fixing your registry



Hi

Do you mean using security filtering in the GPO or putting domain admins in a
particular OU and linking the policy there?

Have you run RSoP and GPresult,Gpupdate to see IF the policy is applied and
over written or just no t applied etc etc

Try creating a new GPO not editing the default domain policy .....same result?


Regards

S

Jose Luis wrote:
>Hello everybody,
>
>Actually I have some policies in may domain with a hight level of
>restriction because we have a lot of users in Citrix environment and I
>would like to create a new policy only for administrator for deny some
>policies (ie. Add, Delete programs, change registry, etc...)
>
>The Default Policy Domain has "Authenticated users" and the
>Administrators are "Authentecated users" too.
>
>If I try out "Authentecated users" and only put "Domain Admins." the
>policy doesn't work.
>
>Any idea?
>
>Thanks.
>Jose Luis.


--
Message posted via WinServerKB.com
http://www.winserverkb.com/Uwe/Forums.aspx/windows-2000-group-policy/200508/1

.



Relevant Pages

  • RE: GPO settings are not applied
    ... Microsoft Windows XP Operating System Group Policy Result tool v2.0 ... GPO: Automatic_Updates ... GPO: Default Domain Policy ... Secure Proxy Server: N/A ...
    (microsoft.public.windows.server.active_directory)
  • Re: I thought I knew Group Policy but Obviously I dont
    ... you said I should have enabled this feature in that the Default Domain Policy. ... > the settings that i gave you are so that the policy is not applied to your ... > DC's or any computer objects that fall into the scope of the gpo that has ... >>> groupinstread of the Authenticated Users default. ...
    (microsoft.public.win2000.group_policy)
  • Re: Set GPO for specific user group
    ... OK, now the new GPO is listed, but the ie homepage is still set to ... Microsoft Windows XP Operating System Group Policy Result too ... Small Business Server Domain Password Policy ... Filtering: Denied ...
    (microsoft.public.windows.server.sbs)
  • Re: Set GPO for specific user group
    ... Microsoft Windows XP Operating System Group Policy Result too ... Small Business Server Domain Password Policy ... Filtering: Denied ... Filtering: Disabled (GPO) ...
    (microsoft.public.windows.server.sbs)
  • Re: Move W2K3 server to its own OU seperate from SBS (MyBusiness) OU
    ... have a group policy that defines 'log on locally'. ... Small Business Server Remote Assistance Policy ... GPO: Default Domain Policy ... Computer Setting: 3 ...
    (microsoft.public.windows.server.sbs)