Group Policy settings for a specific user?

T

Todd

Greetings. I am trying to use the Group Policy Editor
(under User Configuration\Administrative Templates\Start
Menu and Task Bar) to creat a user acccount that
is "locked down." while I have another account that has
full access to the OS controls.

By locked down I mean that I am trying to remove features
from the Start Menu such as Run, All Program, Control
Panel, ability to right click, etc.

My problem is that once I make these changes in the Group
Policy Editor, they are applied to ALL users.

Is there a way to make these changes via the Group Policy
Editor and have them only apply to a specific user
account?

Thank you!

Todd
 
D

Dorian Gray

Just a guess but:
It appears that local policy\users right assignments can do exactly that by
adding or removing users rights.
Available under gpedit.msc from the run box.
 
J

Jetro

Install any advanced Tweak UI, modify user interface, and revoke Admin
rights from that account. You can manually edit registry or just merge the
content included:
************************************
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg
32]
"NoPlacesBar"=dword:00000001
"NoFileMru"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explor
er]
"NoDriveTypeAutoRun"=dword:000000ff
"NoNetConnectDisconnect"=dword:00000001
"NoShellSearchButton"=dword:00000001
"NoViewContextMenu"=dword:00000001
"NoManageMyComputerVerb"=dword:00000001
"NoHardwareTab"=dword:00000001
"NoChangeKeyboardNavigationIndicators"=dword:00000001
"NoDFSTab"=dword:00000001
"NoComputersNearMe"=dword:00000001
"PromptRunasInstallNetPath"=dword:00000001
"NoStartMenuSubFolders"=dword:00000001
"NoWindowsUpdate"=dword:00000001
"NoCommonGroups"=dword:00000001
"NoRecentDocsMenu"=dword:00000001
"NoSetFolders"=dword:00000001
"NoNetworkConnections"=dword:00000001
"NoFavoritesMenu"=dword:00000001
"NoFind"=dword:00000001
"NoRun"=dword:00000001
"NoBandCustomize"=dword:00000001
"NoDriveTypeAutoRun"=dword:00000095
"NoToolbarCustomize"=dword:00000001
"ForceStartMenuLogOff"=dword:00000001
"NoChangeStartMenu"=dword:00000001
"NoSetTaskbar"=dword:00000001
"NoTrayContextMenu"=dword:00000001
"NoRecentDocsHistory"=dword:00000001
"ClearRecentDocsOnExit"=dword:00000001
"Intellimenus"=dword:00000001
"GreyMSIAds"=dword:00000001
"NoRecentDocsNetHood"=dword:00000001
"DisablePersonalDirChange"=dword:00000001
"NoCloseDragDropBands"=dword:00000001
"NoMovingBands"=dword:00000001
"NoSaveSettings"=dword:00000001
"NoActiveDesktop"=dword:00000001
"NoControlPanel"=dword:00000001
"NoDeletePrinter"=dword:00000001
"NoAddPrinter"=dword:00000001
"NoWelcomeScreen"=dword:00000001
"NoBandCustomize"=dword:00000001
"SpecifyDefaultButtons"=dword:00000001
"Btn_Back"=dword:00000001
"Btn_Forward"=dword:00000001
"Btn_Stop"=dword:00000001
"Btn_Refresh"=dword:00000001
"Btn_Home"=dword:00000001
"Btn_Search"=dword:00000002
"Btn_History"=dword:00000002
"Btn_Favorites"=dword:00000002
"Btn_Folders"=dword:00000002
"Btn_Fullscreen"=dword:00000002
"Btn_Tools"=dword:00000002
"Btn_MailNews"=dword:00000002
"Btn_Size"=dword:00000002
"Btn_Print"=dword:00000001
"Btn_Edit"=dword:00000002
"Btn_Discussions"=dword:00000002
"Btn_Cut"=dword:00000001
"Btn_Copy"=dword:00000001
"Btn_Paste"=dword:00000001
"Btn_Encoding"=dword:00000002
"NoDrives"=dword:00000007
"NoViewOnDrive"=dword:00000007
"NoSMMyDocs"=dword:00000001
"NoNetHood"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Networ
k]
"NoEntireNetwork"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnu
m]
"{450D8FBA-AD25-11D0-98A8-0800361B1103}"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
]
"NoDispCPL"=dword:00000001
"DisableTaskMgr"=dword:00000001
"DisableLockWorkstation"=dword:00000001
"DisableChangePassword"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Uninst
all]
"NoAddRemovePrograms"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies]

[HKEY_CURRENT_USER\Software\Policies\Microsoft]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer]
"DisableImportExportFavorites"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control
Panel]
"Advanced"=dword:00000001
"HomePage"=dword:00000001
"Cache"=dword:00000001
"History"=dword:00000001
"Colors"=dword:00000001
"links"=dword:00000001
"Languages"=dword:00000001
"Connwiz Admin Lock"=dword:00000001
"Connection Settings"=dword:00000001
"Proxy"=dword:00000001
"Autoconfig"=dword:00000001
"Ratings"=dword:00000001
"Certificates"=dword:00000001
"Profiles"=dword:00000001
"FormSuggest"=dword:00000001
"FormSuggest Passwords"=dword:00000001
"Messaging"=dword:00000001
"CalendarContact"=dword:00000001
"ResetWebSettings"=dword:00000001
"GeneralTab"=dword:00000001
"SecurityTab"=dword:00000001
"ContentTab"=dword:00000001
"ConnectionsTab"=dword:00000001
"ProgramsTab"=dword:00000001
"AdvancedTab"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet
Explorer\Infodelivery]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions]
"NoAddingChannels"=dword:00000001
"NoRemovingChannels"=dword:00000001
"NoAddingSubscriptions"=dword:00000001
"NoEditingSubscriptions"=dword:00000001
"NoRemovingSubscriptions"=dword:00000001
"NoChannelLogging"=dword:00000001
"NoScheduledUpdates"=dword:00000001
"NoChannelUI"=dword:00000001
"NoSubscriptionContent"=dword:00000001
"NoEditingScheduleGroups"=dword:00000001
"NoBrowserSaveWebComplete"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet
Explorer\Restrictions]
"NoFindFiles"=dword:00000001
"NoBrowserSaveAs"=dword:00000001
"NoFavorites"=dword:00000001
"NoFileNew"=dword:00000001
"NoTheaterMode"=dword:00000001
"NoBrowserOptions"=dword:00000001
"NoHelpItemTipOfTheDay"=dword:00000001
"NoHelpItemNetscapeHelp"=dword:00000001
"NoHelpItemTutorial"=dword:00000001
"NoHelpItemSendFeedback"=dword:00000001
"NoBrowserContextMenu"=dword:00000001
"NoSelectDownloadDir"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\MMC]
"RestrictAuthorMode"=dword:00000001
"RestrictToPermittedSnapins"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\ca]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\ca\Certifi
cates]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\ca\CRLs]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\ca\CTLs]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust\Cert
ificates]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust\CRLs
]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust\CTLs
]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Intern
et Settings]
"EnableAutoProxyResultCache"=dword:00000000
"DisplayScriptDownloadFailureUI"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\NetCache]
"NoConfigCache"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System]
"DisableCMD"=dword:00000002
**************************
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top