restricting group policy editing and creation

  • Thread starter Thread starter barabba72
  • Start date Start date
B

barabba72

Hi,

we run a Window 2000 Domain and have many domain admins which by nature
have the rights to fully manage group policies.

I would like to restrict group policy management so that not all domain
admins have access to these objects. How should I proceed ?

Thanks in advance and Regards.
 
Hi,

Then I would recommend not letting them to be "domain admins" as this would
exceed their necessary privilege.

br,
Denis
 
Hi Denis,

thank you for your answer. There is not "best practice" procedure to
disable group policy creation and/or editing to domain admins ?

Regards
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Back
Top