Re: group based policy on 2000 professional

From: Ray Collins (Ray.CollinsNoSpam@Bigpond.com)
Date: 07/13/02 

From: "Ray Collins" <Ray.CollinsNoSpam@Bigpond.com>
Date: Sat, 13 Jul 2002 12:11:18 +1000

How to Secure Windows in a Non-Domain Environment (Q269799)
http://support.microsoft.com/support/kb/articles/Q269/7/99.ASP

and

How to Apply Local Policies to all Users Except Administrators (Q293655)
http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q293655

HTH

"Rajesh Parikh" <none@noserver.none> wrote in message
news:uGgpnIgKCHA.2404@tkmsftngp11...
> Hi,
>
> I want my application running on Win 2000 pro to be used in a kiosk, this
is
> going to be standalone computer.
>
> I would like to change to custom user interface (instead of explorer.exe)
> only for a group of users. I tried to set this using gropu policy snap-in
by
> setting value for local comp policy -> user configuration -> admin
> templates ->system -> custom user interface.
>
> Problem with this approach is that the changes affect all users including
> Administrator. I would like to have default explorer interface for
> Administrative users and custom UI for another group.
>
> I suspect that the reason for this is I do not have active directory on
this
> 2000 pro system and I was told that Active directory can be set up for
2000
> server only.
>
> Is there any way I can achieve this.
>
> Regards
> Rajesh Parikh
>
>
>

Relevant Pages

  • Re: Needing advice for administrative rights....
    ... > Administrator group on PCs using the Restricted Groups functionality. ... >>>recommend web surfing for search strings such as "active directory delegation" ... >>>>We currently have a situation all technicians are domain administrators. ... >>>>have many PCs and many trainees so it is not a practicle solution. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Use Active Directory to set work station local rights
    ... then anyone can still be made a member of the local Administrators ... > workstation that has the ADMINPAK installed...Otherwise, ... > Microsoft Active Directory MVP ... >> adding the specific user to the local administrators group. ...
    (microsoft.public.win2000.active_directory)
  • Re: Permissions on AD acct not being seen
    ... You can have a view at your administrators settings, ... If you are running Windows XP or Windows Server 2003, ... applied by a group policy from active directory that your administrator has ... > why this user acct that is used to run the software program is not ...
    (microsoft.public.windows.server.active_directory)
  • Re: Use Active Directory to set work station local rights
    ... then you loose the point of restricting which user account objects / ... then anyone can still be made a member of the local Administrators ... > workstation that has the ADMINPAK installed...Otherwise, ... > Microsoft Active Directory MVP ...
    (microsoft.public.win2000.active_directory)