Help! Group policy restricts Admins

[tony]

Hi,
I've setup some group policies on my windows 2000
advanced server (using group policy plugin). I've never
used group policy before on
a win 2000 server. The problem is all the policies
(restrictions i put in, in various templates) are
effective for the administrators too!!!!! This seems very
weird. I even tried to add only specific users to
the "Restricted Groups" and it still doesn't seem to
remove the restrictions for administrators, domain admins
or enterprise admins. What is the problem? I've tried
this on 3 different servers and all of them have the same
issue. Maybe I'm missing something here. I don't want
these policies taking effect for admins.

Thanks

 

[Dave Niemeyer]

I'll take a wild guess that you set the "default domain policy" with these
restrictions. I'm new at this and my cohorts showed me NOT to touch the
default, instead at the get go, make an OU, get a test person in there,
create a Group Policy Object inside that OU, just for that OU and test him
out. We thusly have NO policies on anyone that's not in an OU. So my
helpers and I and a few others are the only ones not in an OU.

Dave N

 

[Steve]

I am having the same problem! been pulling my hair out
for days on end trying to figure it out. Searched the
knowledge base, and cannot figure it out. CAN ANYONE HELP
ME PLEASE!

 

[Steven L Umbach]

Group Policies are applied to ALL users by default under the scope of influence of
the policy. If you do not want it to apply to a group such as administrators you need
to filter it by applying deny permissions for apply to that user group. --- Steve


http://support.microsoft.com/default.aspx?scid=kb;en-us;322176 -- Read up on
filtering.