Custom GPO

CLASS MACHINE
CATEGORY !!category
CATEGORY !!categoryname

POLICY !!Administractive_share_fix_Title
KEYNAME "Software\Microsoft\Windows\CurrentVersion\Policies\System"
#if version >= 4
SUPPORTED !!SUPPORTED_OS
#endif

#if version >= 3
EXPLAIN !!Administractive_share_fix_Help
#endif

VALUENAME "LocalAccountTokenFilterPolicy"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY

END CATEGORY
END CATEGORY

[strings]
category="Customized Policy Settings"
categoryname="Administractive Share Fix"
SUPPORTED_OS="Windows Vista, Windows 7"
Administractive_share_fix_Title="Enable Remote Access for Administractive Share"
Administractive_share_fix_Help="By default, remote administractive share access is not permitted.\nThis is a fix for allowing users who are under administrator group can access administractive share remotely."

ref: http://support.microsoft.com/kb/225087

有空再補一篇客製化工具