Overriding group policy.

[dorion]

The domain's group policy at my work is very restrictive and aggravating. The admin insist on all users being standard users. The department I work in gets a break and we have a shared administrator account. But that still doesn't help get past the group policy all the time. I'm here because I have three questions.

1) Whats the best way to keep services, that group policy shuts down, active?

2) Is there some kind of login script I can run to promote myself to administrator, right now every time I log out to apply local administrator perms the group policy removes me from the group?

3) I remember seeing an option on my Home computer to make UAC prompts require a username and password(like how I do it at work). Is there anyway to reverse this so my domain-bound work computer wouldn't require my username and password once I make myself an admin?


--------------------------------------------
Policy of your IT department is in place for a reason.

If you need something changed, justify it to them.

No-one here should be assisting you

Senior Anandtech Moderator
Common Courtesy

 

[yinan]

Dont do this it is a good way to get yourself fired. If there was an easy way around group policy it would not be as useful as it is.

Easiest solution is to remove the computer from the domain. That is not a recommendation however.

 

[MrChad]

You won't find anyone here that will help you circumvent corporate security policies. Usually, if you have a legitimate business need to have administrative permissions you can request them from the appropriate people at your company.

 

[stash]

Being a standard user is a very good idea, especially in a corporate environment. If you have a legitimate reason to have local admin rights, then take it up with your IT dept. Most people don't need these rights.

Key thing to remember: it's not your computer.

 

[Elias824]

Well if its web browsing you after, you can try using a proxy server, or you can usually still remote desktop into another computer (one not on the domain) for that. But I wouldn't recommend effectively hacking your user account on the domain, im sure your IT dept would be quite upset at you.

 

[JackBurton]

Originally posted by: Elias824
Well if its web browsing you after, you can try using a proxy server, or you can usually still remote desktop into another computer (one not on the domain) for that. But I wouldn't recommend effectively hacking your user account on the domain, im sure your IT dept would be quite upset at you.

Your IT department will be upset with any user trying to bypass the group policies they set. If you are caught bypassing them, you deserve to have the IT department walk up to you, punch you in the face and escort you off the property. That is not YOUR machine! You want to fuck with group policies, do it at home on YOUR OWN machine.