Lockdown standalone XP Pro PC

[ben]

I need to create different levels of access to a standalone XP pro PC.
Previously I used poledit on NT to create several user groups, each with
different levels of access. With XP local group policy, it seems I only
have two levels, those to whom to the policy is applied (users) and those
who aren't (admins), as there is one policy and you turn off access to the
policy for those you don't want to be affected.

Surely there is better access control than either you are an administrator
or you are a restricted user??

How can I create several levels, ie, Untrusted users (who have everything
locked out), Trusted users (more access than untrusted users), Managers
(have slightly more access, but not to everything), Administrators (access
to everything)?

If the PC was on a domain, it could be easily done, but it is a standalone
PC. I could do it easily with poledit on win98 etc.

 

[Malke]

I need to create different levels of access to a standalone XP pro PC.
Previously I used poledit on NT to create several user groups, each
with
different levels of access. With XP local group policy, it seems I
only have two levels, those to whom to the policy is applied (users)
and those who aren't (admins), as there is one policy and you turn off
access to the policy for those you don't want to be affected.

Surely there is better access control than either you are an
administrator or you are a restricted user??

How can I create several levels, ie, Untrusted users (who have
everything locked out), Trusted users (more access than untrusted
users), Managers (have slightly more access, but not to everything),
Administrators (access to everything)?

If the PC was on a domain, it could be easily done, but it is a
standalone
PC. I could do it easily with poledit on win98 etc.

I already answered this when you asked the first time. Please search on
your name. Short answer: create user groups, set permissions as
desired, add users to groups (including yourself).

Malke