restricting group policy editing and creation

  • Thread starter Thread starter barabba72
  • Start date Start date
B

barabba72

Hi,

we run a Window 2000 Domain and have many domain admins which by nature
have the rights to fully manage group policies.

I would like to restrict group policy management so that not all domain
admins have access to these objects. How should I proceed ?

Thanks in advance and Regards.
 
Hi,

Then I would recommend not letting them to be "domain admins" as this would
exceed their necessary privilege.

br,
Denis
 
Hi Denis,

thank you for your answer. There is not "best practice" procedure to
disable group policy creation and/or editing to domain admins ?

Regards
 
Back
Top