Problem End User

I have an end user who is able to access the control panel after setting local group policy to prohibit access and Only his user profile can access it. The domain Admin the local admin or other users are prevented from accessing the control panel until I change the policy back.

Anybody know how this could happen? I've ran antivirus, malware scanners and found no threats. So I don't think its that.
LVL 9
jmac44Asked:
Who is Participating?
 
Thomas GrassiConnect With a Mentor Systems AdministratorCommented:
In a domain environment a domain policy will override a local policy

Run gpresult /r check the policy settings
0
 
jmac44Author Commented:
on the local machine? because I did and the command window open for two seconds then closed.
0
 
Thomas GrassiSystems AdministratorCommented:
Yes on the local machine

Run as administrator
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
jmac44Author Commented:
ran it on local machine - not sure what I'm looking for because of your vague reply but the only thing that looks remotely pertinent in the out put is the following:

Applied Group Policy Objects
    -----------------------------
        Default Domain Policy

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Local Group Policy
            Filtering:  Not Applied (Empty)
0
 
Thomas GrassiSystems AdministratorCommented:
Ok as I said before the domain policy is over riding the local

The report shows just that

So now you need to check the domain level policy
0
 
jmac44Author Commented:
ok it was disabled in the domain group policy. will setting it to not configured fix the issue or will I have to set it to enable?
0
 
Thomas GrassiSystems AdministratorCommented:
If you want that policy settings then you must enable it

Just remember that will effect all computers on the domain
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.