Setting policy to a particular employee or group logging in on Term Server

  • Thread starter Thread starter Nate Harel
  • Start date Start date
N

Nate Harel

Hi all,

Working on a Win2000 Server domain and am relatively newbie to the group
policy.

I set up a company with remote access via VPN/Terminal Server so that one
particular employee can work from home.

She dials in to the server (she is on WinXP Pro)to work on a Access DB that
is running on the server.

All is fine, however, when she goes to the "Setings->Control Panel" she can
see all the Admin Tools. So I went into the group policy for the local
machine and found the piece that allows me to turn off access to the control
panel or parts of it. When I turn off access to the Admin tools, she can't
see it anymore. That's great. HOWEVER, no one else can, including me as the
administrator.

So... I was wondering how to apply that particular policy (or any policy for
that matter) to either a particular person or group.

thanks

Nate
 
This work around usually works. Go to the \windows\system32\group policy\users folder
and give the administrator deny permissions to the folder. --- Steve
 
What Local policy setting did you modify and when you created that group
policy, did you apply it to all users?
I'd suggest that you apply the group policy only to that specific user or
create a security group, add her account nto that security group and apply
the group policy ONLY to that security group (and not to the Administrators
group). The specific right you want to work with is "Apply group policy"
permissions (for domain based policies).
----
Thanks,
Rakesh Chanana [MSFT]

When replying, please post to GROUP so that everyone can benefit from the
knowledge.

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm


--------------------
 
Back
Top