Using Group Policies on Standalone XP Pro

[Guest]

Hi Everyone,

I have a single XP Pro machine that will be used by several users. The
machine is not networked. I would like to establish policies (using Group
Policy Editor [gpedit.msc])for the various users and eventually, groups of
users, that will be using this machine. I am the sole administrator of the
machine.

The Group Policy Editor seems to offer the options I need but I do not
understand how to apply the settings to a particular user or group of users.
When I start gpedit.msc I have two nodes: "Computer Configuration" and "User
Configuration". I believe the settings under the "Computer Configuration"
node apply to *all* users that use this computer whereas the settings under
"User Configuration" applies to the current user. I can't see how to apply
the settings to a particular user or group of users.

Is it possible for me to use the Group Policy Editor to apply settings to
individual users and/or groups of users?

Thanks very much.

 

[MowGreen [MVP]]

Take a look at this MSKB for answers to your questions, A. Foxmore :

How To Use the Group Policy Editor to Manage Local Computer Policy in
Windows XP
http://support.microsoft.com/kb/307882

MowGreen [MVP 2003-2006]
===============
*-343-* FDNY
Never Forgotten
===============

 

[Alan Foxmore]

Take a look at this MSKB for answers to your questions, A. Foxmore :

How To Use the Group Policy Editor to Manage Local Computer Policy in
Windows XP
http://support.microsoft.com/kb/307882

Thanks for the reply but that article seems to assume a domain
controller. I don't have a domain. This is a standalone XP Pro machine.
--
Alan Foxmore

Hi Everyone,

I have a single XP Pro machine that will be used by several users.
The machine is not networked. I would like to establish policies
(using Group Policy Editor [gpedit.msc])for the various users and
eventually, groups of users, that will be using this machine. I am
the sole administrator of the machine.

The Group Policy Editor seems to offer the options I need but I do
not understand how to apply the settings to a particular user or
group of users. When I start gpedit.msc I have two nodes: "Computer
Configuration" and "User Configuration". I believe the settings
under the "Computer Configuration" node apply to *all* users that
use this computer whereas the settings under "User Configuration"
applies to the current user. I can't see how to apply the settings
to a particular user or group of users.

Is it possible for me to use the Group Policy Editor to apply
settings to individual users and/or groups of users?

Thanks very much.

 

[Steven L Umbach]

By far your best option is to use the Shared Computer Toolkit from Microsoft
at the link below that will allow to do much of what you want though you
will not have the full Group Policy user configuration settings to work with
but I think you will be pretty happy with what you can do. The only other
option I know of is to tweak permissions to the
Windows\system32\grouppolicy\user folder to deny read permissions to those
users/groups you do NOT want the Group Policy user configuration settings to
apply to leaving you with those that have the GP settings applied to them
and those that do not. Also denying read to the administrators group will
not allow the local administrators to manage Group Policy locally until the
read permission is applied again. --- Steve

http://www.microsoft.com/windowsxp/sharedaccess/default.mspx --- Shared
Computer Toolkit

 

[MowGreen [MVP]]

The article states :

SUMMARY
This article describes how to use the Group Policy Editor to change
local policy settings for the computer or for users of the computer.

One can use it for a standalone if one so desires.
A very useful FAQ's for GP can be read here :
http://technet2.microsoft.com/windowsserver/en/technologies/featured/gp/faq.mspx

MowGreen [MVP 2003-2006]
===============
*-343-* FDNY
Never Forgotten
===============