MMC Admin templates

[Guest]

One of my workstations runs xp pro, I have been trying to set various user logon configurations under the admin templates of the MMC. Each time I enable a template,( ie: hide my computer from desktop) it not only effects my user logon which is part of the Administrators group, but also other users, which are in the users group. I am not sure how to go about enabling these settings so that they ONLY effect the users, and not the Admin logon

Also, one of the templates restricts drive access. But it only lists drives through D. I want to restrict a drive "F", is there another way of enabling this other than changing some registry key's

Thanks,

Jerdos8

 

[Steven L Umbach]

There are two possible solutions to your problem with local policy applying to
administrators. I don't know of a solution to the drive issue offhand. See links
below. --- Steve

http://www.jsiinc.com/sube/tip2400/rh2492.htm
http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q293655&

One of my workstations runs xp pro, I have been trying to set various user logon

configurations under the admin templates of the MMC. Each time I enable a
template,( ie: hide my computer from desktop) it not only effects my user logon which
is part of the Administrators group, but also other users, which are in the users
group. I am not sure how to go about enabling these settings so that they ONLY
effect the users, and not the Admin logon.

Also, one of the templates restricts drive access. But it only lists drives

through D. I want to restrict a drive "F", is there another way of enabling this
other than changing some registry key's?

 

[Guest]

Thank you, that worked great for my other users!!

If anyone can still assist with the issue of denying access to particular letter drives (ie: "F") that are not listed in the templates that would be great

MM
-->local polic
--->user confi
---->admin template
------>windows component
------->Prevent access to drive
This lists drives through "D" and I want to include other drive letter

Is there a different way, other than changing registry key's ????????

 

[Bruce Sanderson]

See http://support.microsoft.com/?kbid=231289

--
Bruce Sanderson MVP

It's perfectly useless to know the right answer to the wrong question.

Thank you, that worked great for my other users!!!

If anyone can still assist with the issue of denying access to particular

letter drives (ie: "F") that are not listed in the templates that would be
great!