Re: administrator account locked by policy

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Vera Noest [MVP] (vera.noest_at_remove-this.hem.utfors.se)
Date: 06/06/04


Date: Sun, 06 Jun 2004 14:20:04 -0700

To see which policies are affecting a particular user, use the
Resultant set of policies.
Probably, you have defined some policy for Domain Users, and those
affect Administrators as well. You can solve this problem by going to
the Permissions tab of each policy and make sure that Administrators
have "Deny" for the right to "Apply this policy".

315675 - HOW TO: Keep Domain Group Policies from Applying to
Administrator Accounts and Selected Users in Windows 2000
http://support.microsoft.com/?kbid=315675

 --
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
 --- please respond in newsgroup, NOT by private email ---

"Mike" <anonymous@discussions.microsoft.com> wrote in
news:18d2701c44be5$fb9a3d80$a501280a@phx.gbl:

> After a reboot on our Win2K terminal server the
> Administrator account is locked down by a group policy
> that was created for other users. The Administrator
> account is not under any of the other organizational units
> we created for other users, with a policy we created and
> assigned to the units.
>
> Where do we go to see or change what policies are applied
> to the default created accounts?



Relevant Pages

  • RE: WinXP SP3 - Local Security Policy
    ... policies to different users on a Windows XP SP3 standalone machine. ... Log on to the computer as an administrator. ... Close the Gpedit.msc Group Policy snap-in. ... Click Start, point to Control Panel, and then click Folder Options. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Do system policies affect administrators
    ... > Group Policies in Windows 2000 can indeed apply to local administrators ... > may decide to create a local administrator account to logon to avoid any ... > Group Policy via gpedit.msc will apply to all users logging on locally ... > first use filemon and logon to a computer as a regular user and then start ...
    (microsoft.public.win2000.networking)
  • Re: windows 20000 problem
    ... I know that the computer is not being locked down by group policies which is ... and the administrator is in an OU where the policy doesnt apply. ... rebuild which I don't really want to do as this is our intranet server. ... > Domain policy will also apply to users and computers in Organizational ...
    (microsoft.public.win2000.security)
  • Re: Use of gpt.ini file ??
    ... I ma using windows 2000 professal and I have setup a local policy which is apply for all users except Adminstrator. ... logon and logoff with all user profiles to aply policies ... logon as administrator and set policy that was previously enable to disable ... After this the local policies is apply to all user except Administrator. ...
    (microsoft.public.win2000.group_policy)
  • Re: Must all users be administrators?
    ... The familiar look of the AD objects tree you see in Group Policy Editor is ... This seems modestly confusing to an SBS Administrator because there's very ... those rights happen to be nearly unlimited. ... sit a workstation logged on as the Local Administrator, by default, there ...
    (microsoft.public.windows.server.sbs)