Re: Help needed to lock laptop down for users.

From: Roger Abell [MVP] (mvpNoSpam_at_asu.edu)
Date: 07/05/03 

Date: Sat, 5 Jul 2003 11:01:53 -0700

Local Security Policy not applied to all accounts equally

It is crude, but you can Deny Full Control, to those accounts
that should not be impacted by local policy, on the directory
system32\GroupPolicy. For an admin to modify the settings
in policy they need to have the Deny effecting them removed,
and then replaced when finished with the edit.

In some cases the method outlined in KB 293655 is of use
  http://support.microsoft.com/?id=293655

"DCF" <tosca925@NOSPAMyahoo.co.uk> wrote in message
news:emxNa.2223$jr7.14847120@news-text.cableinet.net...
> We have just taken delivery of 10 laptops which are for a students. The
> laptops are XP Pro, what we want to do is use a policy of some kind to
lock
> the laptop down for the user, i.e so they have no access to control panel
or
> the C: drive etc. We already have this in place on our 2000 server and it
> work well. We want to have something similar on the laptop but the laptop
> will not be connected to the server and will be taken home by students to
do
> course work as and when they need to.
>
> I have tried gpedit.msc but this takes the control panel out for the
> administrator as well. What we want is for the user to log on and get the
> restrictions and when the administrator logs on he gets everything.
Because
> the laptops are going to be used by a large number of different people we
> are only going to create one single user account on the machine that all
> users will use to log on. ie. (6user1)
>
> Can anyone advise on what I need to do.
>
>

Relevant Pages

  • Re: Prevent logons other than PC owner?
    ... If you take control over the Log in locally User Right of the machine ... then you can specify exactly what accounts can log into it. ... What you would need to do is to change the local policy (either directly ...
    (microsoft.public.windows.server.security)
  • RE: Group Policy: multiple password policies in the same domain?
    ... > it under access to the GPO. ... The conflict only happens when both policies ... results in having the policy denied. ... > user accounts it affects be able to read it and have "apply ...
    (Focus-Microsoft)
  • Re: Password Policy Basics
    ... but assumed the POLICY would be applied to ALL ... so lcoal machines might start enforcing that policy on ... No, the local accounts are not effected by the domain policy, except you link the policy also to the OU like Florian states. ... I was thinking of service accounts on the servers... ...
    (microsoft.public.windows.group_policy)
  • Re: Windows 2000 users accounts get locked out
    ... I have disabled my accounts lockout policy in my ... >account logon events enabled in Domain Security Policy ... and Domain Controller ...
    (microsoft.public.win2000.security)
  • Re: RSoP Lockout Account
    ... Account Policy, or more specifically any items within Computer ... *domain accounts* can ... account policies per domain, but again, I haven't seen that in writing yet. ... >>> I'm trying to aply a GPO to an OU that contains computers, ...
    (microsoft.public.win2000.group_policy)
Quantcast