I have a domain user (%USER%) that is set as local administration on a specific server(W2K3 R2 std) in my domain.
This user is in a separate OU in the AD. This OU contains a policy that grand the user RDP rights. This works fine.
Now I want the user to be able to edit the registry. Run>regedit
The following error accurse:
"registry editing has been disabled by your administrator"
I have made a new policy for this OU
“Prevent access to registry editing tools” to disable
ran gpupdate & even rebooted the system.
This does not work!
Can anyone help me out?