Group Policy

[Ben Griffiths]

I have an application where I need to restrict a users
access logging onto a w2KPro PC only to internet explorer.
This PC is networked with a number of IP adressable
devices and uses IE to view data ina control room environ.

I managed to diasble all I need in Group Policy but it
also diables the administartors' rights the administrator.
How do I apply this policy only to my User "X"?? ( I was
using the "USER CONFIGURATION" set of parameters.

I am totally new at the MMC console, so any advice greatly
appreciated.

 

[Steven L Umbach]

Hi Ben. Yes by default local Group Policy applies to all users, there
is an unsupported work around that involes deny permissions om the
\winnt\system32\group policy\users folder. Keep in mind that Group Policy
''hides'' a lot of settings that a user may still be able to get around [try
to right click desktop/new/shortcut/browse - possibly you can search hard
drive]. Be sure to lock down ntfs permissions and diable command prompt.
There is also a setting to allow only "approved" applications to run that
you might want to try out in Group Policy, though it certainly is not
foolproof - read the explanation box on that setting. Windows XP is much
more powerful at locking down computers with it's Software Restriction
Policies. --- Steve

http://www.jsiinc.com/sube/tip2400/rh2492.htm