How can I disable the local Group Policy that prevents all users from accessing a server's drives, control panel, etc.?
How can I disable the local Group Policy that prevents all users from accessing a server's drives, control panel, etc.?
Currently whenever a user is logged onto the server using Remote Desktop, the user has no access to the Control Panel, the Run command, the local server drives, etc.
Furthermore, if the user opens up a command prompt and types in Control.exe, the user receives an error message that says “This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator.” (see the screenshot).
The only user that can make any changes to the server is the local administrator account.
Even though a particular user has been given local administrator rights and his domain account has been given domain administrator rights, enterprise administrator rights, and schema administrator rights, he still has these restrictions and receives these error messages when trying to launch command-line commands.
I need to be able to make a particular change to a user's Windows profile and can only make this change while this user is logged on.
currently I am logged onto this server as the local administrator (which has the full ability to make any and all changes to the server).
I have opened the local group policy editor (gpedit.msc) and am looking for the place to temporarily lift this restriction so that I can then log back on as this domain user, and make the settings change. I will then log back on as the local administrator account and will change group policy setting that I have temporarily changed back to its original setting and will also remove all of the excessive administrator rights that I have temporarily given this particular domain user.
My question is: exactly which local Group Policy setting do I need to change? Where exactly do I find it in the gpedit.msc Group Policy console?
This is a Windows Server 2003 member server that is part of a Windows Server 2003 network.
Restrictions.png
Currently whenever a user is logged onto the server using Remote Desktop, the user has no access to the Control Panel, the Run command, the local server drives, etc.
Furthermore, if the user opens up a command prompt and types in Control.exe, the user receives an error message that says “This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator.” (see the screenshot).
The only user that can make any changes to the server is the local administrator account.
Even though a particular user has been given local administrator rights and his domain account has been given domain administrator rights, enterprise administrator rights, and schema administrator rights, he still has these restrictions and receives these error messages when trying to launch command-line commands.
I need to be able to make a particular change to a user's Windows profile and can only make this change while this user is logged on.
currently I am logged onto this server as the local administrator (which has the full ability to make any and all changes to the server).
I have opened the local group policy editor (gpedit.msc) and am looking for the place to temporarily lift this restriction so that I can then log back on as this domain user, and make the settings change. I will then log back on as the local administrator account and will change group policy setting that I have temporarily changed back to its original setting and will also remove all of the excessive administrator rights that I have temporarily given this particular domain user.
My question is: exactly which local Group Policy setting do I need to change? Where exactly do I find it in the gpedit.msc Group Policy console?
This is a Windows Server 2003 member server that is part of a Windows Server 2003 network.
Restrictions.png
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.