Group Policy settings for a specific user?

  • Thread starter Thread starter Todd
  • Start date Start date
T

Todd

Greetings. I am trying to use the Group Policy Editor
(under User Configuration\Administrative Templates\Start
Menu and Task Bar) to creat a user acccount that
is "locked down." while I have another account that has
full access to the OS controls.

By locked down I mean that I am trying to remove features
from the Start Menu such as Run, All Program, Control
Panel, ability to right click, etc.

My problem is that once I make these changes in the Group
Policy Editor, they are applied to ALL users.

Is there a way to make these changes via the Group Policy
Editor and have them only apply to a specific user
account?

Thank you!

Todd
 
Just a guess but:
It appears that local policy\users right assignments can do exactly that by
adding or removing users rights.
Available under gpedit.msc from the run box.
 
Install any advanced Tweak UI, modify user interface, and revoke Admin
rights from that account. You can manually edit registry or just merge the
content included:
************************************
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg
32]
"NoPlacesBar"=dword:00000001
"NoFileMru"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explor
er]
"NoDriveTypeAutoRun"=dword:000000ff
"NoNetConnectDisconnect"=dword:00000001
"NoShellSearchButton"=dword:00000001
"NoViewContextMenu"=dword:00000001
"NoManageMyComputerVerb"=dword:00000001
"NoHardwareTab"=dword:00000001
"NoChangeKeyboardNavigationIndicators"=dword:00000001
"NoDFSTab"=dword:00000001
"NoComputersNearMe"=dword:00000001
"PromptRunasInstallNetPath"=dword:00000001
"NoStartMenuSubFolders"=dword:00000001
"NoWindowsUpdate"=dword:00000001
"NoCommonGroups"=dword:00000001
"NoRecentDocsMenu"=dword:00000001
"NoSetFolders"=dword:00000001
"NoNetworkConnections"=dword:00000001
"NoFavoritesMenu"=dword:00000001
"NoFind"=dword:00000001
"NoRun"=dword:00000001
"NoBandCustomize"=dword:00000001
"NoDriveTypeAutoRun"=dword:00000095
"NoToolbarCustomize"=dword:00000001
"ForceStartMenuLogOff"=dword:00000001
"NoChangeStartMenu"=dword:00000001
"NoSetTaskbar"=dword:00000001
"NoTrayContextMenu"=dword:00000001
"NoRecentDocsHistory"=dword:00000001
"ClearRecentDocsOnExit"=dword:00000001
"Intellimenus"=dword:00000001
"GreyMSIAds"=dword:00000001
"NoRecentDocsNetHood"=dword:00000001
"DisablePersonalDirChange"=dword:00000001
"NoCloseDragDropBands"=dword:00000001
"NoMovingBands"=dword:00000001
"NoSaveSettings"=dword:00000001
"NoActiveDesktop"=dword:00000001
"NoControlPanel"=dword:00000001
"NoDeletePrinter"=dword:00000001
"NoAddPrinter"=dword:00000001
"NoWelcomeScreen"=dword:00000001
"NoBandCustomize"=dword:00000001
"SpecifyDefaultButtons"=dword:00000001
"Btn_Back"=dword:00000001
"Btn_Forward"=dword:00000001
"Btn_Stop"=dword:00000001
"Btn_Refresh"=dword:00000001
"Btn_Home"=dword:00000001
"Btn_Search"=dword:00000002
"Btn_History"=dword:00000002
"Btn_Favorites"=dword:00000002
"Btn_Folders"=dword:00000002
"Btn_Fullscreen"=dword:00000002
"Btn_Tools"=dword:00000002
"Btn_MailNews"=dword:00000002
"Btn_Size"=dword:00000002
"Btn_Print"=dword:00000001
"Btn_Edit"=dword:00000002
"Btn_Discussions"=dword:00000002
"Btn_Cut"=dword:00000001
"Btn_Copy"=dword:00000001
"Btn_Paste"=dword:00000001
"Btn_Encoding"=dword:00000002
"NoDrives"=dword:00000007
"NoViewOnDrive"=dword:00000007
"NoSMMyDocs"=dword:00000001
"NoNetHood"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Networ
k]
"NoEntireNetwork"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnu
m]
"{450D8FBA-AD25-11D0-98A8-0800361B1103}"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
]
"NoDispCPL"=dword:00000001
"DisableTaskMgr"=dword:00000001
"DisableLockWorkstation"=dword:00000001
"DisableChangePassword"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Uninst
all]
"NoAddRemovePrograms"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies]

[HKEY_CURRENT_USER\Software\Policies\Microsoft]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer]
"DisableImportExportFavorites"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control
Panel]
"Advanced"=dword:00000001
"HomePage"=dword:00000001
"Cache"=dword:00000001
"History"=dword:00000001
"Colors"=dword:00000001
"links"=dword:00000001
"Languages"=dword:00000001
"Connwiz Admin Lock"=dword:00000001
"Connection Settings"=dword:00000001
"Proxy"=dword:00000001
"Autoconfig"=dword:00000001
"Ratings"=dword:00000001
"Certificates"=dword:00000001
"Profiles"=dword:00000001
"FormSuggest"=dword:00000001
"FormSuggest Passwords"=dword:00000001
"Messaging"=dword:00000001
"CalendarContact"=dword:00000001
"ResetWebSettings"=dword:00000001
"GeneralTab"=dword:00000001
"SecurityTab"=dword:00000001
"ContentTab"=dword:00000001
"ConnectionsTab"=dword:00000001
"ProgramsTab"=dword:00000001
"AdvancedTab"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet
Explorer\Infodelivery]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions]
"NoAddingChannels"=dword:00000001
"NoRemovingChannels"=dword:00000001
"NoAddingSubscriptions"=dword:00000001
"NoEditingSubscriptions"=dword:00000001
"NoRemovingSubscriptions"=dword:00000001
"NoChannelLogging"=dword:00000001
"NoScheduledUpdates"=dword:00000001
"NoChannelUI"=dword:00000001
"NoSubscriptionContent"=dword:00000001
"NoEditingScheduleGroups"=dword:00000001
"NoBrowserSaveWebComplete"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet
Explorer\Restrictions]
"NoFindFiles"=dword:00000001
"NoBrowserSaveAs"=dword:00000001
"NoFavorites"=dword:00000001
"NoFileNew"=dword:00000001
"NoTheaterMode"=dword:00000001
"NoBrowserOptions"=dword:00000001
"NoHelpItemTipOfTheDay"=dword:00000001
"NoHelpItemNetscapeHelp"=dword:00000001
"NoHelpItemTutorial"=dword:00000001
"NoHelpItemSendFeedback"=dword:00000001
"NoBrowserContextMenu"=dword:00000001
"NoSelectDownloadDir"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\MMC]
"RestrictAuthorMode"=dword:00000001
"RestrictToPermittedSnapins"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\ca]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\ca\Certifi
cates]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\ca\CRLs]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\ca\CTLs]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust\Cert
ificates]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust\CRLs
]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust\CTLs
]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Intern
et Settings]
"EnableAutoProxyResultCache"=dword:00000000
"DisplayScriptDownloadFailureUI"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\NetCache]
"NoConfigCache"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System]
"DisableCMD"=dword:00000002
**************************
 
Back
Top