Re: how do you customize the desktop and start menu

From: Nepatsfan (nepatsfan_at_SBXXXIX.com)
Date: 10/26/05 

Date: Tue, 25 Oct 2005 19:02:30 -0400

Joe Remlin wrote:
> I am helping set up a library. I would like to customize and
> then prevent changes to the start menu and the desktop.
>
> I am able to do so by typing in the run dialogue box
> "gpedit.msc" All the options I would like to set are
> avaliable in this control panel.
>
> The problem is that what ever I select applies to both the
> user and the administrator. Is there a simple way to get
> these options to apply to only the administrator.
>
> Thanks,
>
> Joe

You might want to take a look at these articles:

How to apply local policies to all users except administrators
in a workgroup setting in Windows 2000 (works in XP)
http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B293655

Group Policy In A Workgroup Situation
http://www.theeldergeek.com/gp07.htm

Lockdown by group using Local Computer Policy without Active
Directory
http://tinyurl.com/687jj

I've found that the "Deny permission to Administrators"
approach
works best but with one safeguard. Make sure you create a
shortcut to the C:\Windows\Sytstem32 folder on the desktop of
an account that is a Computer Administrator. If not, you could
find yourself unable to run gpedit.msc in order to change
policy settings.

Keep in mind that this procedure only applies to policies that
are contained within the User Configuration.

An alternative approach would be to use this utility:

Doug Knox's XP Security Console
http://www.dougknox.com/xp/utils/xp_securityconsole.htm

Good luck

Nepatsfan

Relevant Pages

  • Re: Local DC Group Policy being applied for passwrds not the Defau
    ... I'm confused now you say "Local Computer Policy on the Dc"? ... Systems Administrator ... received the complexity error, but I did not have the complexity ...
    (microsoft.public.windows.server.active_directory)
  • Re: Installing Windows 2000 printer driver on Windows Server 2003
    ... Check if you have a "Local Computer Policy", ... I am Administrator on this system... ... >> policy without Active directory this option I can't find - on my Windows ...
    (microsoft.public.windows.server.general)
  • Re: Must all users be administrators?
    ... The familiar look of the AD objects tree you see in Group Policy Editor is ... This seems modestly confusing to an SBS Administrator because there's very ... those rights happen to be nearly unlimited. ... sit a workstation logged on as the Local Administrator, by default, there ...
    (microsoft.public.windows.server.sbs)
  • Re: The local policy of this system does not permit you to logon i
    ... Security policies were propagated with warning. ... Error 0x534 occurs when a user account in one or more Group Policy objects ... I have checked the security policies & the administrator profile is not ...
    (microsoft.public.windows.server.sbs)
  • Re: Administrator unable to log on Interactively
    ... Firstly i tried accessing the domain controller C drive ... I think the policy has been changed in the "local security ... >> administrator is not able to log on interactively. ... >Interactive Logon setting takes precedence over the Allow ...
    (microsoft.public.win2000.security)