Win2k Policy on Netware Environment

  • Thread starter Thread starter Jesse Schulman
  • Start date Start date
J

Jesse Schulman

I am trying to implement a Policy on our Win2k Pro PCs
which are configured on a Netware Environment without any
Win2k Servers or Active Directory. I continue to run in
to the problem where when we log on as the Administrator,
we get the same policy restrictions that the users get.
Is there any way to set it up so that only the users get
these restrictions?
 
You can deny the administrators group the right to apply local
security/group policy. See below...

Deny Read and Execute to the Administrator account to the following files

<systemroot>\system32\Group Policy\gpt.ini
<systemroot>\systerm32\GroupPolicy\User\Registry.pol

Create a second administrator account called GPOADMIN. This account will
continue
to get policy
but will be able to administer and change the policy, since the original
Administrator account will get access denied
when trying to open the policy in the MMC. Use the GPOADmin account only to
change
or edit the policy.

If the original administrator account gets read and execute permissions
restored,
it will immediately begin to download and apply policy.

If the policy locks down the desktop, make sure to place a shortcut to the
mmc and
Group Policy snap in on the desktop of the GPOAdmin profile
so he can access the policy. (i.e. the run and program menus are restricted
by the policy)
 
Back
Top