Administrator to not Read Group Policy

[bradhiggins]

Hey all,

I was wondering if there is a way in which you can have a tight group policy but when you log on with the or an administrator account you are not restricted by the group policy.

What I mean is that if you enable the policy element that disables the run menu, I want this done for all our users but I also want when I log in with an administrator account, that this account still has the run menu.

IS ther an easy way of doing this

Cheers

Brad

 

[jpederson]

It's called "filtering" the policy. Go to the security tab of the GPO. Add the group you want to NOT be affected by the policy (Administrators). Select Deny on the apply group policy permission.

Hope this helps

 

[bradhiggins]

Thank you very muchly.

I had previously been trying to uncheck the read permisson eg Security group does not read group policy.

But this has worked fine.

Cheers

Brad