Solved

How to perform Admin Support on a desktop that has GPO applied to user account

Posted on 2011-09-19
2
240 Views
Last Modified: 2012-05-12
Hello,

I have setup a OU structure and applied a GPO that prevents users from changing any settings on desktop, IE, control panel, etc.... Now as an Admin, how am I able to remote into any users system that has these GPOs and perform any troubleshooting within the areas I blocked through a GPO. I don't want to have to disable the policy everytime I need to work on a specific system and I don't want to have to log that user out and use a admin account if I'm working on that users desktop settings.

Server: Windows Server 2008 Enterprise
Users Desktops: XP and Windows 7

Thanks,

nimdatx
0
Comment
Question by:nimdatx
2 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 36561325
You can use security flitering on that GPO

http://adisfun.blogspot.com/2009/04/security-filtering-and-group-policy.html

Deny the "apply" permissions for the admin group and they won't receive the GPO settings.

...but you won't be able to make those changes as that user account directly if those policies are applied.  That is not possible.

Thanks

Mike
0
 
LVL 1

Author Comment

by:nimdatx
ID: 36561364
Admin account is good, but how does an admin perform work on a users system when logged into that system as that user and GPO is applied to users account. What if I need to map a network drive and put it on that users desktop? If this is not possible, how do you perform helpdesk support on a users account with a GPO applied to users?
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

791 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question