Group Policy all users except admin boo boo

[Guest]

Hi

I followed the doc on applying group policy to all users except administrator. Only prob is i think i doofed up at the end because the restricted policy is applied to admin and other users are unrestricted. I have a backup of both registry.pol files. How do I go about remedying the situation. PS: In safe mode i have Administrator and Admin plus one standard user. When NOT in safe mode the Administrator account is hidden.,???

Any help appreciated.
Regards

 

[Roger Abell]

Log in as an admin, using alt-cntrl-del-del if needed to do so.
Then, set a Deny of Full control for Administrators on folder
System32\GroupPolicy
Log off and then back in as an admin, remove the full control,
and then edit group policy to change the settings.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA

Hi,

I followed the doc on applying group policy to all users except

administrator. Only prob is i think i doofed up at the end because the
restricted policy is applied to admin and other users are unrestricted. I
have a backup of both registry.pol files. How do I go about remedying the
situation. PS: In safe mode i have Administrator and Admin plus one standard
user. When NOT in safe mode the Administrator account is hidden.,????

 

[Guest]

Thanks but since the group policy changes, I no longer have access to the security tab in folder properties while logged in as Admin. PS: I have Admin and Administrator but i can only log in to Administrator through safe mode for some reason???

 

[Guest]

Ok I worked out that Administrator was just hidden from the welcome screen d'uh. Admin is just an extra administrator account someone has created.
However im still having trouble...
If i make changes to the group policy whilst logged in as Administrator, when I log back in as any other user, the changes have not been implemented, they are only implementing to the administrator account.
I am editing Administrative templates under user, is this right???

 

[Roger Abell [MVP]]

Changes that you make in Local Security Policy should be applied to
all accounts. However, you have tried to follow that KB and so have
some extra Registy.pol files to consider.
You might want to get back to where this is functioning as intended,
applying in the same way to all accounts, and then try moving forward
again.
Personally, I do not much care for that particular "work-around"
It is cumbersome, error prone, and inflexible when you want to change
things later.

Ok I worked out that Administrator was just hidden from the welcome screen

d'uh. Admin is just an extra administrator account someone has created.

However im still having trouble...
If i make changes to the group policy whilst logged in as Administrator,

when I log back in as any other user, the changes have not been implemented,
they are only implementing to the administrator account.