Excluding Admin from group policy

[Randy]

How can i prevent a restricted user account from
accessing features such as the control panel, run command
etc. but still allowing the administrator access to these
features. i tried using group policy but it restricted
the admin account too. Im running w2k with workgroup
setting. Im new to this so i dont know that much about
what im doing.

Thx.

 

[Rahul Gupta [MS]]

Take a look at following kb article
HOW TO: Apply Local Policies to all Users Except Administrators on Windows
2000 in a Workgroup Setting
http://support.microsoft.com/default.aspx?scid=kb;en-us;293655

Thanks
Rahul

 

[Sabin Nair[MSFT]]

Hi Randy,

There are multiple ways of applying a policy:

Ex: you could add a security group of computers or users and apply the
policy to that group. You would do this from Properties -> Security tab

You could also just apply the polciy to the entire user or computer group by
giving "read" and "apply" rights to authenticated users.

Now, an admin is also an authenticated user and hence the polices will apply
to them. So, you need to explicitly deny them from that policy (select deny
for admins).

--
Thanks
Sabin Nair M.S(Computer Engg.), MCSE, MCSA
Directory Services Team
Microsoft Corp.

"Please do not send e-mail directly to this alias.
This alias is for newsgroup purposes only."