Solved

How to perform Admin Support on a desktop that has GPO applied to user account

Posted on 2011-09-19
2
251 Views
Last Modified: 2012-05-12
Hello,

I have setup a OU structure and applied a GPO that prevents users from changing any settings on desktop, IE, control panel, etc.... Now as an Admin, how am I able to remote into any users system that has these GPOs and perform any troubleshooting within the areas I blocked through a GPO. I don't want to have to disable the policy everytime I need to work on a specific system and I don't want to have to log that user out and use a admin account if I'm working on that users desktop settings.

Server: Windows Server 2008 Enterprise
Users Desktops: XP and Windows 7

Thanks,

nimdatx
0
Comment
Question by:nimdatx
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 36561325
You can use security flitering on that GPO

http://adisfun.blogspot.com/2009/04/security-filtering-and-group-policy.html

Deny the "apply" permissions for the admin group and they won't receive the GPO settings.

...but you won't be able to make those changes as that user account directly if those policies are applied.  That is not possible.

Thanks

Mike
0
 
LVL 1

Author Comment

by:nimdatx
ID: 36561364
Admin account is good, but how does an admin perform work on a users system when logged into that system as that user and GPO is applied to users account. What if I need to map a network drive and put it on that users desktop? If this is not possible, how do you perform helpdesk support on a users account with a GPO applied to users?
0

Featured Post

Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Powerline Adapter - Unidentified network 9 92
ntp server 15 81
sync 2 servers 2008 9 70
Sharepoint 2010 Site User Administration 6 26
Last week, our Skyport webinar on “How to secure your Active Directory” (https://www.experts-exchange.com/videos/5810/Webinar-Is-Your-Active-Directory-as-Secure-as-You-Think.html?cid=Gene_Skyport) provided 218 attendees with a step-by-step guide for…
A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

732 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question