|
Posted by mackdaddy315 on June 29, 2008, 9:26 am
Please log in for more thread options > I'm using domain policies with restrictions for WinXP software like Inter=
net
> Explorer, etc.
> I noticed that when an domain administrator logs in, the restrictions are
> not applied. This is ok for me.
> The problem is this: I want some IT people (help desk technitians) that a=
re
> NOT domain administrations but belong to a "IT Group" domain group, to
> bypass policy restrictions as domain admins do.
>
> How to do this?
> Thanks!
This is a user policy right?
Do you have it set to deny for domain admins or enterprise admins? if
so that is the culprit.
Put the admins you want it to apply to in a group and under security
apply it to that group and any others you want and take out the deny.
as long as you are not in any of the groups where it is set to apply
you should be ok.
Also separating by OU can be useful as well.
|