GPEDIT, Administrators and Users

[bbford]

Hi,

On WinXP Pro, I am trying to setup gpedit on 1 pc which has 1 administrator
and 3 limited users.

By reading through the newsgroups, I learned how to apply the gpedit
restrictions to all the users except the administrator. I did this by
denying access to the administrator on the gpedit security menu.

I would like to take this 1 step further. I would like to have the gpedit
restrictions apply to 2 out of the 3 limited users. So far, I have not been
able to do this.

Can this be done on XP? Are all limited users grouped together?

I tried using the "Doug Knox Secruity Console" but it messed up my system
so bad, I had to use system restore...

Any suggestions?

 

[System]

Create a local group, add the two users to the group and apply the policies
to the local group.

 

[Doug Knox MS-MVP]

bbford,

I can only assume that you should probably leave Group Policies alone. The Security Console does not apply any restrictions that can't be applied via GPEDIT (with the sole exception of preventing users from running the Console itself), and only does so on a per user basis. Unless you managed to lock yourself out of the Security Console, all changes are easily reversed. And of course, there is a feedback link, which it appears you never used.