Restriction

[AC]

I need some elucidation concerning user restriction.

I have been trying to assign restriction for a sparticular user within users
group (member of users) without applyint them to my account as a memeber of
administrators.

Trying to perform that in Group Policy setting window - User Configuration -
Administrative Templates the result is applied to my account (member of
administators).

Is there any way of make restriction assigned to a users group or a single
user. Or the only way to do it is 'limit account' setting for a specified
user?

Thank you in advance for any suggestion.

AC
Windows XP Pro SP2

 

[Malke]

I need some elucidation concerning user restriction.

I have been trying to assign restriction for a sparticular user within
users group (member of users) without applyint them to my account as a
memeber of administrators.

Trying to perform that in Group Policy setting window - User
Configuration - Administrative Templates the result is applied to my
account (member of administators).

Is there any way of make restriction assigned to a users group or a
single user. Or the only way to do it is 'limit account' setting for a
specified user?

I'm a little fuzzy about exactly what you want to do, but if I interpret
your post correctly, you want to create a new user group with specific
restrictions with Group Policy Editor. Then assign users to that group.
Don't forget to give yourself rights to that group, too.

Malke

 

[AC]

Thanks for your reply.

What I try to do is to limit user (User group) performing some tasks without
applying those restrictions to me (my account) this is a user that is a part
of administrators group.

When I apply some restrictions within Group Policy window - User
Configuration - Administrative Templates they are automatically appearing in
my account as a user with administrator privileges.

For instance: I would like to block a user from having access to add/remove
programs option keeping this access for me (user from administrators group).

I think that should not be a case.

Where is the problem then?

AC

When I

 

[Malke]

Thanks for your reply.

What I try to do is to limit user (User group) performing some tasks
without applying those restrictions to me (my account) this is a user
that is a part of administrators group.

When I apply some restrictions within Group Policy window - User
Configuration - Administrative Templates they are automatically
appearing in my account as a user with administrator privileges.

For instance: I would like to block a user from having access to
add/remove programs option keeping this access for me (user from
administrators group).

Try this Knowledge Base article. Ignore the part about it applying to
Win2K:

How to apply local policies to all users except administrators in a
workgroup setting in Windows 2000

http://support.microsoft.com/default.aspx?scid=kb;en-us;293655

Malke

 

[AC]

I thank you very much. I have already read this article.

It is the method, without doubt.

But I wonder why the <normal< way does not here.

Shall I log as an administrator, or it is sufficient to be logged as an user
from administrators group?

AC

 

[Malke]

I thank you very much. I have already read this article.

It is the method, without doubt.

But I wonder why the <normal< way does not here.

I don't know. Someone more versed than I in Group Policy probably does
know. You could try posting your question in the newsgroup devoted to
Group Policy questions. Here is a link to a list of all the MS
newsgroups:

http://aumha.org/nntp.htm

Shall I log as an administrator, or it is sufficient to be logged as
an user from administrators group?

AFAIK, any account with administrative privileges can do anything
administratively. But again, I would ask the question in the Group
Policy newsgroup.

Malke