Tech Support > Microsoft Windows > Windows Server > GPO What is going on???
GPO What is going on???
Posted by Peter F on March 23rd, 2007


Hi All,

I need some help in solving a problem with my administrators account. I am
unable to add or remove programs using the administrators account with an
error message "add or remove programs is restricted. please check with your
administrator. I have run the rsop.msc and find that the control panel option
is enabled. I have gone into the local security policy and disabled the "add
or remove programs" rebooted the machine and it still shows as enabled in
the rsop.msc. I am still unable to use the add remove programs.

Does anyone know what is overriding this option. Can someone please help.
--
Flinty

Posted by Brian Delaney [MSFT] on March 28th, 2007


Hi,

The GPO applying this setting in the domain has presedence over the local
policy. Either reverse the GPO in the domain if you don't want anyone to
get it or link the GPO in a place where the admin users do not fall under
its scope.

Hope this helps,

Brian Delaney
Microsoft Canada
--

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------

Posted by Flinty on March 28th, 2007


Hi Brian,

Thanks very much for your comments.

How would i reverse the GPO in the domain, as apposed to the local settings?

"Brian Delaney [MSFT]" wrote:

Posted by Brian Delaney [MSFT] on March 29th, 2007


From the rsop.msc it will list which GPO contains the setting in question.
Locate that GPO in the domain using the Group Policy Management console and
edit the GPO setting it back to not defined or disabled.

Hope this helps,

Brian Delaney
Microsoft Canada
--

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------