>Locking Down ONLY 'users' Locally<

[Wayne B.]

I have a Win2k machine that is not part of a network but
is in a classroom environment. I will be setting up a few
different user accounts but will have only 1
administrator account for myself. How do I set
restrictions on my 'users group' accounts without
those restrictions affecting my administrator account. I
want to lockdown the desktop, delete 'run', make the
control panel inaccessible, things of that nature.

I've been told that I can get this done by running
gpedit.msc. Once I'm in Group Policy I can't find any of
the things that I just mentioned. I tried MMC at first,
but the changes that I made affected my admin account as
well as the users'. If a template has to be made for the
settings to take effect, where do you go to access it and
how do you apply it. I'm getting NoWhErE very fast trying
to figure this out.

Could someone point me in the right direction with
please.

THANX N ADVANCE. The Rookie/Wayne B.

 

[Guest]

Hi Wayne,

Based on the description of the issue, I understand that
you would like to restrict Local users on your computer.

By default, the local policies apply to all users,
including administrators. To restrict the local users,
you must log on as each user of the computer and use the
GPEdit.MSC tool and set the restrictions. User accounts
that do not have restrictions from the GPEdit.msc will
not have the policies implemented for that account.

For further information, please visit the link given
below that has the step-by-step for applying local
policies to all users except administrators:

http://support.microsoft.com/default.aspx?scid=kb;en-
us;q293655

Kind Regards,
Srikanth N
This posting is provided "AS IS" with no warranties, and
confers no rights.

 

[Wayne B.]

You have just enabled me to stop pulling the rest of the
hair out of my head. THANX A BUNCH! Wayne B.

 

[Wayne B.]

Srikanth N - I hope you see this 2nd reply here.

I SPOKE TOOO SOON. The "user accounts do not have
permission to perform this operation". That Group
Policy Error is showing up when I try to run gpedit.msc
from within the user accounts that I have set up. I can
only run it in my admin account. Which Really makes NO
sense to me at all because, I can still run MMC from
within the user accounts. I would think that MMC would be
restricted before gpedit.msc. ??????
ANYWAY.......
How do I work around this to still reach my desired
results of what we discussed earlier.
If anyone else sees this and has an answer for me, by all
means please join in.

STILL IN THE DARK. Wayne B.