Re: policy settings for stand-alone pc

From: Richard (Richard_at_discussions.microsoft.com)
Date: 01/11/05 

Date: Tue, 11 Jan 2005 03:35:03 -0800

...but surely this will end up with all users (including my account and the
administrator account) having the same group policy settings. I want members
of different groups to have different settings. Can this be done?

"Malke" wrote:

> Richard wrote:
>
> > I have a stand-alone (i.e. non-domain) pc running xp pro. There are
> > multiple user accounts most of which are set to "limited". But I want
> > to make further restrictions on what such accounts can see and/or do.
> > The type of things that a group policy would normally control if the
> > pc was in a domain. Is there an easy way to do this?
> >
> > I looked at local policies but these appear to apply the same settings
> > to all users, even members of the admins group!
> >
> > I tried to use a logon script to set the registry settings that a
> > group policy would normally set but that failed because a "limited"
> > user can't write to the registry!
> >
> > I think I can do a "runas" in vb.net (maybe scripting too?) so maybe I
> > could call my .net application from my login script? But this seams
> > alot of work!
>
> Make new *groups* that have the restrictions you want. Set the
> restrictions with Group Policy Editor (Start>Run gpedit.msc [enter]).
> Add the users who should belong to that group. Make sure you also add
> yourself and the Administrator to the group.
>
> Malke
> --
> MS MVP - Windows Shell/User
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
>

Relevant Pages

  • Re: One Administrator account unable to access Network settings
    ... When you configure Group Policy on a workgroup computer by default the settings apply ... account is still an administrator account. ...
    (microsoft.public.win2000.group_policy)
  • Re: Problems with GPO
    ... Just keep in mind that any deny user right will override the allow user ... Gpresult can help troubleshoot Group Policy problems. ... > Iīve created a GPO with this settings in a Windows Server 2003 Active ... > Itīs possible that other users that are not members of these groups are ...
    (microsoft.public.windows.server.active_directory)
  • Re: SQL Domain Group Permissions
    ... Most settings can be retrieved by any authenticated user. ... the group "Domain Admins" is added to the local ... Administrators group with the computer is joined to the domain. ... members of Domain Admins to retrieve more information on the computers. ...
    (microsoft.public.sqlserver.security)
  • Re: Not apply a policy against the administrator
    ... 1- You should be using Group Policy Managemnt, ... for terminal services profile under the computer settings section. ... The problem is our administrator account picks up this setting and ...
    (microsoft.public.windows.server.active_directory)
  • Re: limit domain user login to specific group on 2 xp machines
    ... By default, members of the local groups, Administrators, Backup Operators, ... Windows Settings ... > login to two student machines in this lab setting. ...
    (microsoft.public.win2000.group_policy)
Quantcast