"please contact your system administrator"... I *am* the administrator

[Esta Vida Nueva]

I am trying to lock-down a PC running XP Pro for a friend, as their oldest
son is a little bit funny and keeps trying to lock the rest of the family
out (and once succeeded so it took forever trying to hack in).

I have now wiped the machine clear and built it from scratch, and am using
Group Policy via Start > run > "gpedit.msc" to enable security settings.

Some of the settings I have applied, such as disabling the DOS prompt are
applying to Administrator as well, so even when I am logged on as
Administrator, the system is not allowing access to the Console.

If anyone can direct me as to configuring this to allow Administrator to be
"above" the settings enacted I would appreciate this. I remember when using
Poledit on Windows95 you would create a policy for each user... this would
be helpful too if possible.


--
Steve

mhm28x28

[Esta Vida Nueva]

On Thu, 29 Apr 2004 06:16:03 -0700, WT Duke wrote:

> Glad it worked! Just don't forget to deny your account or group on that
> folder!! Just as important, don't forget the background refresh setting.
> The first time you forget will make you pull your hair out. The good
> thing about this is that when you need to make a change, undo the deny,
> make your changes, and then, the most important part, put deny back on.
> If you don't, you will become intimately acquainted with the CACLS
> application and command line mania.

Thank you for killing another bird with this stone! I had hoped there would
be another way to impliment specific file permissions; this will be very
useful on an XP home machine.

Thanks again!

--
Steve

mhm28x28