Re: Local policy questions

Only by applying the policies with something other than GPEDIT. In a non-domain environment, Group Policies, set through GPEDIT apply to all users of the machine.

See www.dougknox.com, Win XP Utilities, Windows XP Security Console. This application will allow you to apply many of the GPO restrictions on a per-user basis.

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

<bruneauhm@xxxxxxxxxxx> wrote in message news:1147286971.635531.89590@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I have some standalone XP Pro systems that I am trying to lock down for
use as Citrix clients. I am using gpedit.msc. (Not connected\setup to
domain)

I have gotten some items to work the way I think they should (only
user) but some others like "prohibit access to control panel" applies
to local admins too which I dont want to occur.

User Config | Admin templates | Control Pannel | prohibit

Control Panel is just one of many that I am noticing apply to local
admin as well as users

Can I set local policies so that the it only affects users and not
local admins?

Thanks in advance for your help
Frenchy

.

Relevant Pages

  • Re: Assigning File and Folder Permissions Via Group Policy
    ... still pretty new to group policies and so wanted to double-check my ... so a few policies with a lot of settings in each policy may ... or two settings also may not be the best solution. ...
    (microsoft.public.windows.group_policy)
  • Re: Incorporate .exe into bootup
    ... Policies are great, but are a pain to figure out. ... them, but for your login banner, look in your default domain ... >> What about just using group policies to specify a login banner, ... You can't do much on Win9x clients that they ...
    (microsoft.public.windows.server.networking)
  • Re: Can not make local printer available in a remote desktop session
    ... To look at the Group Policies run gpedit.msc on the Remote Desktop ... I’d like to make my local printer available in a remote desktop session. ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: Single User/Group Deny Access
    ... I did mean group policies. ... up for me) I'll have to go and check out the permissions on the shares. ... Group Policies linked to the Domain perhaps? ... flexibility as other GPO settings NOR is it convenient until you are good ...
    (microsoft.public.windows.server.active_directory)
  • Re: how to create sub-GPOs
    ... applying your policies to the domain level is not always a good ... I'd recommend that you link your group policies to ... users"-OU and have additional settings you give them. ... |--deptA policy ...
    (microsoft.public.win2000.group_policy)