Separate GPOs for separate users on stand-alone PC

[Oleg]

Hello,

I have installed W2K and used GPO snap-in on local PC
(this is stand alone PC). I'd like to use GPO for separate
users. I mean, if I use GPO like it is then these GPOs
would be applied to every user logged on this PC. Is it
possible to separate GPO for different users? For example:
user1 - CMD prompt disabled; user2 - regedit disabled. But
not CMD and regedit disabled for both users.

Thank you in advance,
Oleg

 

[ys@work]

Standalone Win2K does not have the concept of OUs. All users will receive
the same settings.
To achieve that, you will need a domain and place each user in a seperate
OU.
I think so

 

[Oli Restorick [MVP]]

As "ys" said, there are no OUs on a standalone PC.

What you can do, though, is to create groups and filter the policy by using
permissions to not process the policy for certain groups. That should work.

Oli

 

[Gary Mudgett [MSFT]]

Since you are talking about a stand-alone PC you would have to resort to
System Policies and use poledit to create a policy file. That should give
you most of the options you are trying to limit.

318753 HOW TO: Create a System Policy Setting in Windows 2000
http://support.microsoft.com/?id=318753

--
Gary Mudgett, MCSE, MCSA
Windows 2000/2003 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Reha]

GPO s can apply OU or domain level

-----Original Message-----
Standalone Win2K does not have the concept of OUs. All users will receive
the same settings.
To achieve that, you will need a domain and place each user in a seperate
OU.
I think so





.

 

[ys@work]

Group Policy can be applied (linked) to Site, Domain, OUs and sub-OUs as
well.

 

[Steven L Umbach]

There is an unsupported hack that involves using deny ntfs permissions to the
\winnt\system32\group policy\users folder that you may try to use to keep Group
Policy user configuration from applying to a certain group even though that will not
do what you want. In your case you could modify ntfs permissions on the cmd.exe,
command.com, regent, and reedit files to control access wherever they may be on the
computer keeping in mind that a service pack installation may change permissions back
to default. --- Steve