Group Policy

[cipro]

This is somewhat of a theoretical question but I need to get an answer for it.

If an administrator applies a group policy to himself, how can he then revert that group policy so it no longer effects what he does. I have been looking on teknet so far and I cant find any solutions. Any help is much appreciated.

Thanks

 

[brontosaurus]

for example? You must have something in mind...?

 

[cipro]

I have been told this situation from a manager where I work. he has not told me much but from what I can understand. He has applied a group policy to the administrators that should not be there and now he does not know how he can get rid of it. (sorry if I was a little vague earlier)

 

[cipro]

I have been told this situation from a manager where I work. he has not told me much but from what I can understand. He has applied a group policy to the administrators that should not be there and now he does not know how he can get rid of it. (sorry if I was a little vague earlier)

 

[mozingod]

Well, unlike NT, 2000 "tattoos" the machine. It leaves all GPO registry changes behind, unless you specifically revert them. So, for example, if you deny the command prompt to the admins, even if you took that computer from the domain, it would still have that setting. You would either have to change the registry by hand, or make another GP to specifically grant them access to the command prompt. Be careful though, in our classroom a while back, someone denied access to the MMC to the admins, and we had no way what-so-ever to revert it (although we later found the TechNet article on that registry entry location). Best advice for the future... always setup a test account for new GP you're thinking of deploying.