Lock down all users except the Administrator

[Nelson Arroyo]

I would like to lock down all users except the
administrator account in windows xp.

 

[Colin Nash [MVP]]

Is this Windows XP Home or Professional?

What do you mean by "lock down" ? What is it you want to prevent them from
doing?

 

[Rehan]

Hoping you meant Lock Down = Disable then you can execute the folowing
command on a dos prompt to remove the specified user ids from "Users" group.

net localgroup Users USERID /delete

where USERID is the id of the user to be disabled.

To see which users are part of the group "Users" you can do this:

net localgroup Users

To remove user ids from "Administrators" and "Power Users" group execute
command such as:

net localgroup "Power Users" USERID /delete
net localgroup Administrators USERID /delete

(dont do this with your own id, or else...)

A user not in any of the local groups wont be able to use the computer.

To re-enable a user, all you need is to add the back in

net localgroup Users USERID /add

 

[Roger Abell]

Just to clarify, the command shown in this post

net localgroup Users USERID /delete

will remove the USERID account from being a member
of the Users group.
It does not disable the account, although it somewhat
cripples it. Due to the membership in Users of the two
predefineds, Authenticated Users and Interactive, the
account most often will still be effectively a Users member.

Using the command
net user USERID /active:no
will disable the local account named USERID, but this will
leave that account otherwise unchanged.

 

[Doug Knox MS-MVP]

Assuming that you're referring to applying Group Policies and you're running XP Pro.

http://support.microsoft.com/?id=293655
HOW TO: Apply Local Policies to all Users Except Administrators on Windows 2000 in a Workgroup Setting

Otherwise, for XP Home, or Pro, see www.dougknox.com, Win XP Utilities, Windows XP Security Console.