Win2003 domain w/Group policies in place.
I have an XP user who is a local admin of his machine. I created a gpo that only allows him to open an MMC of ADU&C. I created the MMC and dropped it onto his desktop. The GPO I set up has these settings:
Restrict the user from entering author mode
ADU&C snap-in is enabled and is the only enabled snap-in.
Now, he also needs to run the MMC that comes with the Deployment Desktop (a program that helps with Vista deployments).
When he tries to open the msc file for the MMC, he gets the errors that a policy has restricted this functionality.
I tried creating the MMC and giving him User Mode - Full Access, but he gets the same error.
I do not want him to have access to any other Admin-type snap-ins.
What am I missing in my GPO settings?
Thanks!
I have an XP user who is a local admin of his machine. I created a gpo that only allows him to open an MMC of ADU&C. I created the MMC and dropped it onto his desktop. The GPO I set up has these settings:
Restrict the user from entering author mode
ADU&C snap-in is enabled and is the only enabled snap-in.
Now, he also needs to run the MMC that comes with the Deployment Desktop (a program that helps with Vista deployments).
When he tries to open the msc file for the MMC, he gets the errors that a policy has restricted this functionality.
I tried creating the MMC and giving him User Mode - Full Access, but he gets the same error.
I do not want him to have access to any other Admin-type snap-ins.
What am I missing in my GPO settings?
Thanks!