GPO file permission

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Ferdi - 25 Oct 2007 14:37 GMT

Hi,

We have a Windows 2003 domain. The users are local adminstrators.
We' ve set an background image (active desktop) for al users with a GPO. The
background file is stored on the local computers because we have many
notebook users. Is there a way we can secure the image file with permissions
so that the local admins cannot remove or delete the file?

Regards,

Ferdi

Reply to this Message

Shenan Stanley - 25 Oct 2007 18:47 GMT

> We have a Windows 2003 domain. The users are local adminstrators.
> We' ve set an background image (active desktop) for al users with a
> GPO. The background file is stored on the local computers because
> we have many notebook users. Is there a way we can secure the image
> file with permissions so that the local admins cannot remove or
> delete the file?

Local administrative rights equals full ownership of the machine and
everything on it.

Nothing you do via group policy to said machines will be effective until you
resolve the issue of giving your users local administrative rights. In
fact - nothing you do in any way to said machines will be effective until
you resolve the issue of giving users local administrative rights.

Signature

Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html

Reply to this Message