Announcement

Collapse
No announcement yet.

Prevent Policy On Administrators

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Prevent Policy On Administrators

    Hello Everyone,
    I Need To Prevent All Group Policy Settings On My Domain from applying On administrators Group on server 2008 .
    I Need to Do It Without Create opposite Gpo To Administrators Group .
    Can Somebody Have a clue How To Do It ?

  • #2
    Re: Prevent Policy On Administrators

    deny read access for the Administrators gorup to the GPO.
    this is a bad idea though..
    Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

    Comment


    • #3
      Re: Prevent Policy On Administrators

      In order to get a group policy applied the subject need to have read and apply group policy permissions. Placing a deny read is not advisable as administrators often need to know what is set in those policies. To make sure the policy is not applied you need to uncheck the apply Group policy check-mark. A deny is not necessary.

      And be careful because the computer account is an local administrator, so computer policies which have the administrators filtered out will not be applied on computer objects.
      [Powershell]
      Start-DayDream
      Set-Location Malibu Beach
      Get-Drink
      Lay-Back
      Start-Sleep
      ....
      Wake-Up!
      Resume-Service
      Write-Warning
      [/Powershell]

      BLOG: Therealshrimp.blogspot.com

      Comment

      Working...
      X