Microsoft Management Console

[tbrenner]

Hello,

I have a Windows 2003 Server, and I have two users, an Administrator with
full access and Administrator powers, and an 'Operator' with very limited
access, only part of the 'Users' group. I am using gpedit.msc (typed in run)
to edit all of the settings on the computer, such as disabling access to the
control panel, etc. I log onto the Administrator name in order to access
this and I make my necessary changes then log out of administrator then log
into the 'Operator' account and none of the settings are applied to this
account. I did some testing, created new user accounts and I found that the only users that are being affected by these changes are the users in the
Administrators group. Does anyone know why only the Administrators are being affected and not the entire computer Any help would be greatly appreciated!

Tim

[Snurfen]

Welcome to CTH, tbrenner

Are you forcing an update of the group policies after applying the changes? ( gpupdate /force ).
Often these updates take a few minutes to become enforced, the reason being Active Directory is looking around for other Domain Controllers to synchronise with - regardless of whether you are in a standalone environment or a massive AD forest.

If you just log off and back on, they may not have actually kicked in yet.

[tbrenner]

Hey Snurfen, thanks for the welcome!

I tried that but still no luck. The group policies are definitely working, just not across the entire computer, only on the users in the Administrator group. I fear I may have screwed up a config file somewhere

[Snurfen]

soubnds like it - have you tried setting the gpo's by command line, instead of through MMC. That way, you can be very specific about which user groups it gets applied to.

there are a couple of cracking pages on the subject on technet.com. I'll see if I can dig some good ones up. I cheat, I've bought the microsoft press command line bible, but sadly it is sitting cosily in my desk in work.