I am running win2k server, and I want to set certain users not to be able to have the run command, etc. When I set the 'Default Domain Policy' to do this there are two problems. 1) The policies only activate on the server(local machine) and do not work on the 98 or XP machines (clients) on the domain. I have tried setting the option 'No Override' and still nothing... 2) The policies go through to the administrators (on the local machine) - obiously I don't wan this so how do I add specific users to a policy ? If you have any ideas I would be pleased to hear them :D Regards, K. Savage conputing.net@kallumsavage.com

The policies won't apply to the 98 machines so don't even try that. Also, I wouldn't edit the default domain policy. It is a better idea to add a new policy in case you screw things up. If so, then you can just delete the new policy and still have the original settings in the default. Where are you setting this. ARe you using AD Users and Computers and changing the Group Policy in there? Rather than testing this on the whole domain, try creating a test OU and applying the policy to it.

Glen is right. Don't mess around with group policies at the domain level for this one. Create an OU and some test users. Make sure the test users are in the test OU. Then creat a policy and apply it to the test OU. Make sure the test users can read and apply the policy. Then logon as a test user and see what happens.

I figured it out, somehow because the dns server for the clients was not set to the server it did not work, as soon as I set it, it once again worked. Weird. Thanks 4 replies, K. Savage