AutoAdminLogon

[Guest]

Hi,

I am setting up a exremely locked down standalone XP SP2 machine.
Restrictions are done thru GPEDIT.MSC - User Config. In order to stop the
restrictions from applying to the Administrator account, I have denied read
access to this account on the \system32\GroupPolicy folder. This works fine.
When a regular account logs in, all the restrictions are in effect and they
are removed if I logon with an Admin account. The problem comes in if I
enable AutoAdminLogon. For some reason, the restrictions are not in place
when the machine logs on automically with a regular user account. If I remove
AutoAdminLogon, it goes back to being restricted. What am I missing? thanks.

 

[Steven L Umbach]

I never use autologon since I don't consider it secure so I can't say but it
seems you have run into some behavior that bypasses local Group Policy. You
might want to look at the capabilities of the free Shared Computer Tooklit
to see if that works for you as shown in the link below.

Steve

http://www.microsoft.com/windowsxp/sharedaccess/default.mspx