Re: User Accounts for Standalone PC
From: Roger Abell {MVP} (mvpNOSPAM_at_asu.edu)
Date: 04/27/03
- Next message: RichieRich: "Re: Logon"
- Previous message: Scott: "Client Services for NetWare has disabled the Welcome screen"
- In reply to: Adrian Georges: "User Accounts for Standalone PC"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sat, 26 Apr 2003 16:57:34 -0700
"Adrian Georges" <adriano@swissonline.ch> wrote in message news:01a701c3097f$62a4f420$3401280a@phx.gbl...
> Hi there,
>
> I have a standalone PC (WinXP Pro) with diffrent accounts.
>
> My wish: Only administrators have fully windows access
> such as Control Panel or Execute.
>
> I can make such changes this on the ms console.
> But my problem, it takes effect even for the
> administrator, which is not wanted.
>
> Can anyone help me? No additional Software is wanted :-)
>
> Cheers
> Adrian
Local Security Policy not applied to all accounts equally
It is crude, but you can Deny Full Control, to those accounts
that should not be impacted by local policy, on the directory
system32\GroupPolicy. For an admin to modify the settings
in policy they need to have the Deny effecting them removed,
and then replaced when finished with the edit.
In some cases the method outlined in KB 293655 is of use
http://support.microsoft.com/?id=293655
-- Roger Abell MS MVP (Security, Windows), MCDBA, MCSE both Associate Expert - Windows XP ExpertZone http://www.microsoft.com/windowsxp/expertzone
- Next message: RichieRich: "Re: Logon"
- Previous message: Scott: "Client Services for NetWare has disabled the Welcome screen"
- In reply to: Adrian Georges: "User Accounts for Standalone PC"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
