Re: More User Setup Problems in XP

From: Roger Abell [MVP] (mvpNOSPAM@asu.edu)
Date: 01/22/03


From: "Roger Abell [MVP]" <mvpNOSPAM@asu.edu>
Date: Tue, 21 Jan 2003 18:32:47 -0700


As an alternative you could exempt Administrators from
the application of local group policy by setting a Deny
Full control on system32\GroupPolicy.
This is not really recommended, but it works. You will
not be able to edit policy settings while the Deny is in
place, so you will be removing it and needing to remember
to put it back on or else the settings will apply to them too.
Since you want to latch the box down this means the
Admins would be . . . well you get the picture.
Within Local Security Policy in Pro (or better add the
Group Policy snap-in into a new mmc) you can tighten
the box down in most of the ways that you have mentioned.
These settings are used for setting up kiosk environments
which are probably tighter than you are after.

--
Roger
"Mike" <mike@mail.com> wrote in message
news:07ea01c2c156$f451b960$d3f82ecf@TK2MSFTNGXA10...
> Okay the problem wasn't really fixed from the last post
> and I don't know if people read the replies so here goes.
>
> I have win xp pro.
>
> I have 2 admin. accounts no problems.
> I have 1 limited account called roommates.
>
> I want to restrict my extra drives to keep them away from
> the roommates. I have already removed all programs I don't
> want them running from the Shared and moved them into the
> admin folders so they have the word processor, internet
> explorer and my dial up internet.
>
> When they click on My Computer I don't want my D:,E:,F:,G:
> or A: drive to appear on their screen. I am going to hide
> folders on the C: drive unless I can block it from them
> too I just want them to access their my documents folder
> only.
>
> If there is a way to do this please explain and pretend I
> know nothing. The setup is a workgroup not a domain.
> Thanks in advance.
>
> Mike


Relevant Pages

  • Re: Local Policy Update Using Remote Registry Edit
    ... Keep in mind that domain profile settings apply only when domain computer ... You can edit local Group Policy remotely by selecting the mmc ... find it always best to edit Group Policy instead of registry settings. ... Is there a way to remotely edit the local group policy of a Windows XP ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Security Filtering does not work correctly in GPO
    ... Deny apply only. ... where the domain admin was logged on. ... the settings in the "User Group Policy" were gone. ... "Scope-Setting" in the Group Policy object. ...
    (microsoft.public.windows.server.active_directory)
  • RE: Several Problems; how to reset security and troubleshoot serve
    ... On the SBS security settings; I accept your response, ... On the Remote Assistance Issue I have check all of the settings as you ... What started me on the path of security problem was I had a simular problem ... Start the Microsoft Management Console Group Policy snap-in. ...
    (microsoft.public.windows.server.sbs)
  • Re: Problem applying custom Group Policy
    ... I have tested to make some settings in Computer Configuration (in ... Microsoft Windows 2000 Operating System Group Policy Result ... Local Group Policy ...
    (microsoft.public.windows.server.active_directory)
  • Re: iNTERACTIVE LOGON welcome screen - make it go away
    ... I created a custom ADM file for these two settings ... and imported it into the GPO under the Computer Administritative templates. ... really great expertise in Group Policy often reply to posts including ... doing a gpupdate on that domain controller which ideally would be the ...
    (microsoft.public.windowsxp.security_admin)