Where does the default GPO come from?

[JamesMcguinness]

Ok I have a new AD in Windows 2003, starting adding my users to the domain etc all's well. Thing is on the PC's a GPO seems to be in effect that I haven't defined. Firewall is on and options cannot be changed. I can't install new apps, and some network machines (\\[machinename]) are comming up access denied. My main issue is the firewall so I'd like to know what GPO this would be coming from.

As for my GPO's I've only defined one for a certain OU for login script settings. On the same OU I specified that the firewall should be disabled. Doesn't work, seems a GPO is somewhere above this...

 

[JamesMcguinness]

Ok I think I've realized something. I've created a GPO for a OU that specifies the firewall disabled. I then put the computers in question into this OU and the firewall is then disabled. That's done...

Now I think what is happening on the PC is that the user accounts once on the domain are equivelant to an XP local 'limited' account. Thus the user does not have access to admin stuff locally or on the domain. Make sense that this is the default and they'd have to be in the administrators group to have rights. Is there a way via GPO to give rights to installing applications and what not?

 

[58sniper]

You can use RESTRICTED GROUPS to add the domain users to the local Power Users group.

Using Restricted Groups

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

Pat Richard, MCSE(2) MCSA:Messaging, CNA(2)

 

[JamesMcguinness]

Perfect, thanks for the link I'll check it out.