1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Group Policy Woes

Discussion in 'Windows XP' started by localhost, 2004/10/27.

Thread Status:
Not open for further replies.
  1. 2004/10/27
    localhost

    localhost Inactive Thread Starter

    Joined:
    2002/11/27
    Messages:
    90
    Likes Received:
    0
    I'm running XP SP2 on a standalone machine.

    I need to restrict some option such as changing of system properties etc on my machine to the user group "Users" while not affecting user group "Administrators ".

    I have used gpedit.msc to tweak the settings but it seems to apply to both users and administrators.

    Any idea how I can go about applying certain group policy settings to user group "Users" while not affecting "Administrators "?
     
    localhost,
    #1
  2. 2004/10/27
    Christer

    Christer Geek Member Staff

    Joined:
    2002/12/17
    Messages:
    6,585
    Likes Received:
    74
    Hello localhost!

    I managed to lock down a user account on a "public" computer, using registry edits. Go to WinGuides Software Network and check it out. You will find what You need (I think) in the Registry Guide and in the Software Guide.

    You need to, temporarily, make the account an administrator to be able to edit the registry, logged in on that account.

    When finished, log out and log in on the "real" administrator account and change the other one to limited.

    The first thing on the agenda should be to learn how to backup the registry and how to restore it, in the event of making a mistake.

    Christer
     
    Christer,
    #2


  3. to hide this advert.

  4. 2004/10/27
    localhost

    localhost Inactive Thread Starter

    Joined:
    2002/11/27
    Messages:
    90
    Likes Received:
    0
    Can't seems to find the registry hack you are referring.

    Any other means?
     
    localhost,
    #3
  5. 2004/10/28
    Christer

    Christer Geek Member Staff

    Joined:
    2002/12/17
    Messages:
    6,585
    Likes Received:
    74
    Christer,
    #4
  6. 2004/10/28
    quackbal

    quackbal Inactive

    Joined:
    2003/06/08
    Messages:
    227
    Likes Received:
    0
    policies

    Could also try WinLock if you're up for third party software.
     
    quackbal,
    #5
  7. 2004/10/30
    localhost

    localhost Inactive Thread Starter

    Joined:
    2002/11/27
    Messages:
    90
    Likes Received:
    0
    Ah, thanks.

    I found another method. To apply group policy to only users, you could simply change the permission of users to Read/Execute while disable admin read access to folder %SYSTEMROOT%\System32\Group Policy

    Hence, the group policy will have no effect on administrators.
     
    localhost,
    #6
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...