Local Group Policy Deny Administrator

[Guest]

Network: Windows NT 4.0 Server SP6a
WorkStation Windows NT 4.0 WorkStation + Windows XP

Hi all.

I install a fresh windows Xp on a machine. Because I don't have Active
Directory on my network, I configured many Local Group Policy on my machine.
You know that when you configure Local Group Policy for a computer, the
policies are applied to all user even Administrator.

So I saw on the web that if you deny the Domain Admins group or a user to
read the folder C:\Windows\Systen32\GroupPolicy, the policies wont be apply.

I did that on my first XP computer and it work well, but i'm now installing
a new computer and do the same thing, but it don't work.

Do you have any idea why my Administrator (Domain Admin), even if I deny it
to read the folder C:\Windows\System32\GroupPolicy, all the policy still
apply ?

Thanks

** I flush the Administrator profile without success.
** Sorrry for my english

 

[Steven L Umbach]

Try giving also giving "administrators" deny permission for that
lder. -- Steve