Please Help!!! Group Policy Question

  • Thread starter Thread starter Kevin
  • Start date Start date
K

Kevin

Folks:

I want to lock down a PC for the "user" group of users;
such as remove IE access (and from the desktop), and other
settings available via the local group policy object. When
I do this I also see that the administrators desktop is
affected - I checked and "Administrator" is a member of
the Administrators group. How can I just affect the users
group OR a particular user such as "games" ? I must be
making a simple mistake. PLEASE HELP - THANKS!!!
 
Kevin:

I'm no expert in group policy, but I think what you need to do is to deny
the group policy for specific groups. Look into the use of cacls.exe. I've
done this for a group of users that I've created, and not for the
Administrators group. You need to be aware that you still need a user who
can run gpedit.msc so that you can change the group policies in the future.

HTH... Doug
 
Back
Top