Re: User Restictions on a Standalone Machine



"Christopher Harrison" <SpamFactory@xxxxxxxxxxxxxxxxxxx> wrote in message
news:1160919066.915788.183240@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Gosh -- that's a hack-and-a-half... but it works! Thanks :)


Yes indeed, and you're welcome.

Be careful in planning as the hack's real pain comes when you
decide you need to change policy settigs, again, and again . . .

(PS - one can also deny full to Administrators on the directory
system32\GroupPolicy, but this is quite drastic and requires an
unset to edit with certainty of remembering to re-deny).

Roger


Roger Abell [MVP] wrote:
Outside of a domain, local policy has effect on all machine
local accounts equally. This is changing with the Vista release
(finally, after 6 years of being advised that this is needed)
You may find interest in (the painful to implement hack)
http://support.microsoft.com/default.aspx?scid=kb;EN-US;293655



.



Relevant Pages