Managing User Profiles With Group Policies

[Ronnie]

Is it possible to manage a user profile that is locked
down by group policies logged in as an administrator?
For instance:
UserA is locked down using group policies from a Windows
2000 network. The Control Panel is locked out and also
Internet Explorer properties. Can an administrator log
on to UserA's computer and make adjustments to the
settings in UserA's profile that are locked out by the
group policies?

 

[Seeker]

There are two issues here; one is whether the policy is user based or
machine based. If user based, then yes an Administrator can log in and
change settings; however these would be temporary since the next time the
user logs in he would be locked out again. You have not mentioned it but I
gather that you intend to copy the administrator's profile onto the users'
for the changes to stick?

If the policy is machine based, again you can override temporarily the with
a local Admin account (run secpol.msc), but the Group Policy would come back
next time the system restarts.

Also look on the Group Policy on the Domain Controller and see what OU it is
applicable to; it may give you more ideas.

 

[Guest]

Thank you for your quick response. The policies are being
applied to both user profile and the machine. When I log
in as admin I don't understand how I can change settings
in another users profile on my pc. If ex. testguy logs
into my machine, his IE is locked and has no control
panel. When I am logged in as admin, all my stuff works.
How can I change testguys settings logged in as me(admin)?

 

[Seeker]

You can copy the Administrator's profile over the user's profile; go to
Control Panel>System>Advanced, and click on 'settings' under 'User
Profiles'. Select the administrator's profile and click on 'copy to'; then
browse to C:\Documents and Settings\TargetUserProfile (which would be the
user you want to get the admin's settings).

Keep in mind that the user would then get the Admin's profile, but will not
inherit administrative rights. To be safe, perform the operation on a test
user and see what it gets you first.