Announcement

Collapse
No announcement yet.

exclude administrator when applying local GP

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • exclude administrator when applying local GP

    Hello,
    I am deploying 30 Thin clients boxes that will be not connected to domain.
    They will have access to limited Internet sites.
    While applying some local GPOs administrator account is affected too.
    I found MS KB for w2k.
    Unfortunately, it not works for XP (XPE on Thin).

    Any ideas?

    Thanks,
    Michael.
    "When you hit a wrong note it's the next note that makes it good or bad". Miles Davis

  • #2
    Re: exclude administrator when applying local GP

    you could apply WMI filters, so that the 'administrators' group does not have read access to the group policy object... ?
    Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

    Comment


    • #3
      Re: exclude administrator when applying local GP

      I don't think you can use WMI filters for Local GP.

      Only for User policies, one dirty way of doing it would be:
      • Institute the policies you want for Local Group Policy - User Configuration.
      • Navigate to C:\Windows\System32\GroupPolicy folder, right click and select Properties.
      • Click the Security tab on the GroupPolicy Properties dialog box.
      • Highlight the Group or Username that you want to exclude from being affected by the User Configuration part of Local Group Policy.
      • In the Permissions section, change the Read permission from Allow to Deny.
      • Click Allow. Click OK.
      http://www.theeldergeek.com/gp07.htm

      Deny permissions will take precedence over Allow.

      You will find that when logged on as the admin you might have trouble editing the local GP, In which case you'll need to go back and reverse the above.

      Ta
      Caesar's cipher - 3

      ZKHQ BRX HYHQWXDOOB GHFLSKHU WKLV BRX ZLOO UHDOLVH LW ZDV D ZDVWH RI WLPH!

      SFX JNRS FC U6 MNGR

      Comment


      • #4
        Re: exclude administrator when applying local GP

        Thank you.
        "When you hit a wrong note it's the next note that makes it good or bad". Miles Davis

        Comment

        Working...
        X