Restriction Software

Hi
I'm having a problem with Restriction Software Policy:

I created a Hash Rule to deny to some users access to some admin tools: for
now i'm testing the dssite.msc.

I applied a restriction software policy (Hash Rule) to dssite.msc, then went
to the workstation installed the adminpak.msi and i try to run the Active
Directory Sites and Services from the start menu and it worked???, but if i
try to run the console directly from the %SystemRoot%\System32\dssite.msc
the software isn't allow to run as espected.

Does anyone knows what i'm missing here?

Another Question.

I've a group of users and I want to allow them only to create and modify
policies in the domain.
To achive this I add this group to the Group Policy Created Owners, the
problem is that this group only can add or edit their own policies??
I want to allow them to have total access to all policies in the domain.

Best Regards.


.

Loading