• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 265
  • Last Modified:

How to perform Admin Support on a desktop that has GPO applied to user account

Hello,

I have setup a OU structure and applied a GPO that prevents users from changing any settings on desktop, IE, control panel, etc.... Now as an Admin, how am I able to remote into any users system that has these GPOs and perform any troubleshooting within the areas I blocked through a GPO. I don't want to have to disable the policy everytime I need to work on a specific system and I don't want to have to log that user out and use a admin account if I'm working on that users desktop settings.

Server: Windows Server 2008 Enterprise
Users Desktops: XP and Windows 7

Thanks,

nimdatx
0
Jaime Campos
Asked:
Jaime Campos
1 Solution
 
Mike KlineCommented:
You can use security flitering on that GPO

http://adisfun.blogspot.com/2009/04/security-filtering-and-group-policy.html

Deny the "apply" permissions for the admin group and they won't receive the GPO settings.

...but you won't be able to make those changes as that user account directly if those policies are applied.  That is not possible.

Thanks

Mike
0
 
Jaime CamposAuthor Commented:
Admin account is good, but how does an admin perform work on a users system when logged into that system as that user and GPO is applied to users account. What if I need to map a network drive and put it on that users desktop? If this is not possible, how do you perform helpdesk support on a users account with a GPO applied to users?
0

Featured Post

The new generation of project management tools

With monday.com’s project management tool, you can see what everyone on your team is working in a single glance. Its intuitive dashboards are customizable, so you can create systems that work for you.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now