gpedit.msc can't specify the user/group

From: Catfish (catfish@catfish.homeip.net)
Date: 07/30/02


From: "Catfish" <catfish@catfish.homeip.net>
To: <security-basics@securityfocus.com>
Date: Tue, 30 Jul 2002 07:54:41 -0400

A question brought up by another person I really didn't have a good answer
for...

When using gpedit.msc (tried under xp pro but I believe the same under
win2k) to lock things down like hiding start menu items like run, control
panel...etc you can't choose that user(s)/group(s) will be covered under the
policy. It seems to apply to just the user that is using gpedit.msc or when
admin everyone (?).

Is there a way to pick which users apply? Some sort of .pol file we can move
arround or can I create a .reg file with the changes I can import using
regedit to that user. The way I would think it Should work is for the admin
(while logged in as admin) to apply polices to any user/group and be able to
enforce it.

Note this is a standone system not on a domain, AD, .net or whatever. I did
some google'ing but it seems mostly to point to either just run it and make
yours changes or domains/AD which I'm not familar with.



Relevant Pages

  • Re: XP and IE user permissions - stand-alone PC
    ... Log on to that user's desktop and then click Start, Run and enter REGEDIT Go to: ... Per user Group Policy Restrictions for XP Home and XP Pro ... >I have XP Pro with 4 users, two admin and two children ... > they can surf the internet but cannot download programs. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Admin Acct IS NOT in User Accts
    ... I have been an admin before using Home. ... And this is true for both Pro and Home. ... Is it possible to simply do a re-install of XP Pro w/out formatting? ... How to Take Ownership of a File or Folder in Windows XP ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Group Policy and user level access
    ... We are running Windows XP Pro and 2000 Pro on our computers. ... My second question is it possible to leave my users in the local admin ...
    (microsoft.public.win2000.security)
  • Re: Admin Acct IS NOT in User Accts
    ... I have been an admin before using Home. ... And this is true for both Pro and Home. ... Is it possible to simply do a re-install of XP Pro w/out formatting? ... How to Take Ownership of a File or Folder in Windows XP ...
    (microsoft.public.windowsxp.security_admin)
  • Getting frustrated
    ... after I had given her user name admin privileges. ... account is immediately accessable to her under her ... I'd like for her to be able to install and uninstall ... I have another workstation to set up that is XP Pro. ...
    (microsoft.public.windowsxp.security_admin)