User Accounts for Standalone PC

[Adrian Georges]

Hi there,

I have a standalone PC (WinXP Pro) with diffrent accounts.

My wish: Only administrators have fully windows access
such as Control Panel or Execute.

I can make such changes this on the ms console.
But my problem, it takes effect even for the
administrator, which is not wanted.

Can anyone help me? No additional Software is wanted :-)

Cheers
Adrian

[Roger Abell {MVP}]

"Adrian Georges" > wrote in message =
...
> Hi there,
>=20
> I have a standalone PC (WinXP Pro) with diffrent accounts.
>=20
> My wish: Only administrators have fully windows access=20
> such as Control Panel or Execute.
>=20
> I can make such changes this on the ms console.=20
> But my problem, it takes effect even for the=20
> administrator, which is not wanted.
>=20
> Can anyone help me? No additional Software is wanted :-)
>=20
> Cheers
> Adrian
=20
Local Security Policy not applied to all accounts equally

It is crude, but you can Deny Full Control, to those accounts=20
that should not be impacted by local policy, on the directory=20
system32\GroupPolicy. For an admin to modify the settings=20
in policy they need to have the Deny effecting them removed,=20
and then replaced when finished with the edit.

In some cases the method outlined in KB 293655 is of use=20
http://support.microsoft.com/?id=3D293655=20


--=20
Roger Abell
MS MVP (Security, Windows), MCDBA, MCSE both
Associate Expert - Windows XP ExpertZone
http://www.microsoft.com/windowsxp/expertzone