Local policy questions

[bruneauhm]

I have some standalone XP Pro systems that I am trying to lock down for
use as Citrix clients. I am using gpedit.msc. (Not connected\setup to
domain)

I have gotten some items to work the way I think they should (only
user) but some others like "prohibit access to control panel" applies
to local admins too which I dont want to occur.

User Config | Admin templates | Control Pannel | prohibit

Control Panel is just one of many that I am noticing apply to local
admin as well as users

Can I set local policies so that the it only affects users and not
local admins?

Thanks in advance for your help
Frenchy

 

[Doug Knox MS-MVP]

Only by applying the policies with something other than GPEDIT. In a non-domain environment, Group Policies, set through GPEDIT apply to all users of the machine.

See www.dougknox.com, Win XP Utilities, Windows XP Security Console. This application will allow you to apply many of the GPO restrictions on a per-user basis.