gpedit

[bkesting]

Hello,

I have several Windows XP machines that are not part of a
domain. I am trying to use gpedit.msc to create some
restrictions for users that come in so they don't tamper
or see things like the control panel for example. When I
make the changes in gpedit under administrative templates
for users..........the changes take affect in all
accounts....including the admin account. How do i get
around this?

Thanks.

 

[Thorsten Matzner]

I have several Windows XP machines that are not part of a
domain. I am trying to use gpedit.msc to create some
restrictions for users that come in so they don't tamper
or see things like the control panel for example. When I
make the changes in gpedit under administrative templates
for users..........the changes take affect in all
accounts....including the admin account. How do i get
around this?

You don't. To set up restrictions for single users you need Windows to
run in a network with a domain (server).

 

[Kelly]

Hi,

This utility that Doug has created will help: The changes are per user and
can be set as default for any added user.
http://www.dougknox.com/xp/utils/xp_securityconsole.htm

/top10faqs.htm

 

[Ron Chamberlin]

You could try running MMC and locking them down thru the snap ins, and
perhaps TweakUI for a uniform logon.
If you do a search on Microsoft.com and TechNet, I believe there is an Excel
file/checklist which, when followed, allows one to turn the machine into a
near Kiosk mode.

Ron Chamberlin
MS-MVP

 

[Ron Chamberlin]

Nice looking tool Kelly, Thanks for the link.

Ron Chamberlin
MS-MVP

 

[Kelly]

And fresh off the press, too. ) Most welcome, Ron.

/top10faqs.htm