system policy editor.

[dwayne]

We have to set up restrictions for 3 public computers running windows
2000 professional. They will not be conected to a windows server they
will be stand alone. I was wondering if anyone could give me some
steps that I could do to restrict these computers without affecting
the administrator's account. I have tried using the system policy
editor, but I'm not sure if it is placed in the right spot in
registry. Could some help me. Thank you

 

[Steven L Umbach]

You can use ntfs permissions to restrict users other than an administrator
and also use Local Group Policy via gpedit.msc on non domain computers.
There are a lot of options under user configuration/administrative templates
to restrict users but be careful in that restrictions apply equally to all
local users though there are a couple work arounds as described in the links
below. Be sure to read the full explanination of all settings as many just
hide access and consider disabling access to the command prompt and registry
editing tools. --- Steve

http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q293655&
http://www.jsiinc.com/sube/tip2400/rh2492.htm
http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/confeat/grppolsc.mspx
-- may be helpful