RE: [ActiveDir] Undoing a GPO for Domain Admins

[Darren Mar-Elia]

Mark- What you're doing should work. The only difference is that I usually also include the Read permission in the Deny, but since you need both Read and Apply GPO to process a policy, your way should work. Is it possible you have a loopback policy enabled on that GPO?   Darren From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Creamer, Mark Sent: Tuesday, January 06, 2004 7:45 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Undoing a GPO for Domain Admins I created a GPO to manage users’ terminal server desktop settings. I then noticed that those settings were being applied to domain admins, which I did not want. So on the Group Policy’s security tab, I explicitly denied the Apply Group Policy to Domain and Enterprise Admins. However, nothing changed. As an example, all of the applications are hidden from the start menu/Accessories except Explorer and Notepad. However, all the shortcuts do exist in the All Users folder.   How do I restore the desktop to the admins without changing the normal users?   Thanks,   Mark Creamer