Solved

How to perform Admin Support on a desktop that has GPO applied to user account

Posted on 2011-09-19
2
246 Views
Last Modified: 2012-05-12
Hello,

I have setup a OU structure and applied a GPO that prevents users from changing any settings on desktop, IE, control panel, etc.... Now as an Admin, how am I able to remote into any users system that has these GPOs and perform any troubleshooting within the areas I blocked through a GPO. I don't want to have to disable the policy everytime I need to work on a specific system and I don't want to have to log that user out and use a admin account if I'm working on that users desktop settings.

Server: Windows Server 2008 Enterprise
Users Desktops: XP and Windows 7

Thanks,

nimdatx
0
Comment
Question by:nimdatx
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 36561325
You can use security flitering on that GPO

http://adisfun.blogspot.com/2009/04/security-filtering-and-group-policy.html

Deny the "apply" permissions for the admin group and they won't receive the GPO settings.

...but you won't be able to make those changes as that user account directly if those policies are applied.  That is not possible.

Thanks

Mike
0
 
LVL 1

Author Comment

by:nimdatx
ID: 36561364
Admin account is good, but how does an admin perform work on a users system when logged into that system as that user and GPO is applied to users account. What if I need to map a network drive and put it on that users desktop? If this is not possible, how do you perform helpdesk support on a users account with a GPO applied to users?
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
A company’s centralized system that manages user data, security, and distributed resources is often a focus of criminal attention. Active Directory (AD) is no exception. In truth, it’s even more likely to be targeted due to the number of companies …
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question