GPO Question

[BOMBOLI]

I have created a GPO for my TS (2003 Server). Everything goes as planned with the exception that now the Administrator has the same rights as all the users. How can I have the rights and permissions,ex: My Computer-My Network Places-etc showing for Administrator but not for the users.It has to be a simple way to do it just dont see it now.I used to work with Poledit but not available in 2003 anylonger.
Any help is greatly appreciated. Thank you

It is very nice to be important but it is very important to be nice.

 

[RobBentley]

Are the users in a diff GPO to the admins, and at what level in active directory has it been set? If its domain level... there's your problem

 

[pherr]

Create an OU for Admins. Create a GPO for that OU. This will over ride the Domain GPO. I use this method, it works well.

 

[mlichstein]

Filter the GPO so that it doesn't apply to administrators?

 

[BOMBOLI]

Thank you all for your answer. mlichstein, how do I filter a GPO not to apply for administrators?

It is very nice to be important but it is very important to be nice.

 

[mlichstein]

If you right click on a GPO, look at the security tab. Here you can adjust permissions so that the GPO is "filtered" to certain groups of users.

Specifically, a user or group needs to have the read and apply group policy permissions enabled in order to process a GPO. By default, authenticated users has both of these permissions. So if you wanted it to apply to a specific group of users and no one else, you could give that particular group read and apply group policy, and then only that group would apply.

You would also want to give administrators the read permission, so they can edit the GPO.