group policy for all users except admin

[Guest]

Hello,
I am trying to set up some xp pro machines on a workgroup, no server. I need to set up the pc's so that the users can only browse the internet(no downloading, deleting etc), however, the administrator needs to be able to do everything. I have tried using the group policy editor to set up the restrictions, but this also locks out the admin. Can someone please advise.

 

[Christian Anton]

Bronco,

Put all your users into a seperate OU. Then set your policy specific to that
OU for your users.

CA

Hello,
I am trying to set up some xp pro machines on a workgroup, no server.

I need to set up the pc's so that the users can only browse the internet(no
downloading, deleting etc), however, the administrator needs to be able to
do everything. I have tried using the group policy editor to set up the
restrictions, but this also locks out the admin. Can someone please advise.

 

[Fritz]

Wouldn't that only work in a domain setting? bronco has no server.

 

[Christian Anton]

You're absolutely right Fritz.

Bronco disregard my previous comment.

My apologies

 

[Guest]

Paul

I just went through this with 20 pc's that were not part of our domain. What a pain! Below is the link that finally did the trick for me. Forget about using MS's way, in one of their KB's. After you set the policy, you need to go to the Group Policy folder they speak of and DENY all perms to the group that you DO NOT want the GPO to apply to. Beware: do not forget to set the background refresh setting before you start, or you will lock yourself out as I did :-(
I think MS should have a better way of applying GP's selectively to groups and users, but they don't right now. Mayber late

The link: http://is-it-true.org/nt/nt2000/atips/atips131.shtm

Good luck
Tim Duk

 

[Guest]

Thanks for the suggestion. I will give it a try and post the results

Tony -Bronco720

 

[Guest]

You are quite welcome, all I ask is that you pass on the knowledge!