Local Computer: Give local groups GP settings

[Guest]

How do I create GP for a single computer NOT on a domain. I'm looking to
create accounts with different restrictions based on their local group.
Thanks in advance.

 

[Steven L Umbach]

For a single computer you are very limited in what you can do. Basically
with built in features of the OS you can have users that Group Policy
applies to and those that it does not apply to by managing permissions on
the Windows\system32\group policy\users folder where denying read to that
folder should prevent users from getting the Group Policy user restrictions
and also not allow local administrators to change Group Policy locally until
permissions are restored again. There is at least one other solution that is
free from Microsoft called the Shared Computer Toolkit that may do just what
you want but you need to configure it per user. The link below explains
more. --- Steve

http://www.microsoft.com/windowsxp/sharedaccess/overview.mspx --- Shared
Computer Toolkit