gpedit

[bkesting]

Hello,

I have several Windows XP machines that are not part of a
domain. I am trying to use gpedit.msc to create some
restrictions for users that come in so they don't tamper
or see things like the control panel for example. When I
make the changes in gpedit under administrative templates
for users..........the changes take affect in all
accounts....including the admin account. How do i get
around this?

Thanks.

[Thorsten Matzner]

"bkesting" > wrote:

>I have several Windows XP machines that are not part of a
>domain. I am trying to use gpedit.msc to create some
>restrictions for users that come in so they don't tamper
>or see things like the control panel for example. When I
>make the changes in gpedit under administrative templates
>for users..........the changes take affect in all
>accounts....including the admin account. How do i get
>around this?

You don't. To set up restrictions for single users you need Windows to
run in a network with a domain (server).

--
(tm)

This project is for a local Library. They have received
some computers from the Bill and Melinda Gates Foundation
that are running Windows XP and are not part of a domain,
yet those machines are able to accomplish this. It looks
as though those machines are using poledit.exe somehow,
but I cannot figure out how they are doing it........There
has to be a way to do it.

>-----Original Message-----
>"bkesting" > wrote:
>
>>I have several Windows XP machines that are not part of
a
>>domain. I am trying to use gpedit.msc to create some
>>restrictions for users that come in so they don't tamper
>>or see things like the control panel for example. When
I
>>make the changes in gpedit under administrative
templates
>>for users..........the changes take affect in all
>>accounts....including the admin account. How do i get
>>around this?
>
>You don't. To set up restrictions for single users you
need Windows to
>run in a network with a domain (server).
>
>--
>(tm)
>.
>

[Kelly]

Hi,

This utility that Doug has created will help: The changes are per user and
can be set as default for any added user.
http://www.dougknox.com/xp/utils/xp_securityconsole.htm

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Top 10 Frequently Asked Questions and Answers
http://www.kellys-korner-xp.com/top10faqs.htm


"bkesting" > wrote in message
...
> Hello,
>
> I have several Windows XP machines that are not part of a
> domain. I am trying to use gpedit.msc to create some
> restrictions for users that come in so they don't tamper
> or see things like the control panel for example. When I
> make the changes in gpedit under administrative templates
> for users..........the changes take affect in all
> accounts....including the admin account. How do i get
> around this?
>
> Thanks.

[Ron Chamberlin]

You could try running MMC and locking them down thru the snap ins, and
perhaps TweakUI for a uniform logon.
If you do a search on Microsoft.com and TechNet, I believe there is an Excel
file/checklist which, when followed, allows one to turn the machine into a
near Kiosk mode.

Ron Chamberlin
MS-MVP

> wrote in message
...
> This project is for a local Library. They have received
> some computers from the Bill and Melinda Gates Foundation
> that are running Windows XP and are not part of a domain,
> yet those machines are able to accomplish this. It looks
> as though those machines are using poledit.exe somehow,
> but I cannot figure out how they are doing it........There
> has to be a way to do it.
>
> >-----Original Message-----
> >"bkesting" > wrote:
> >
> >>I have several Windows XP machines that are not part of
> a
> >>domain. I am trying to use gpedit.msc to create some
> >>restrictions for users that come in so they don't tamper
> >>or see things like the control panel for example. When
> I
> >>make the changes in gpedit under administrative
> templates
> >>for users..........the changes take affect in all
> >>accounts....including the admin account. How do i get
> >>around this?
> >
> >You don't. To set up restrictions for single users you
> need Windows to
> >run in a network with a domain (server).
> >
> >--
> >(tm)
> >.
> >

[Ron Chamberlin]

Nice looking tool Kelly, Thanks for the link.

Ron Chamberlin
MS-MVP

[Kelly]

And fresh off the press, too. :o) Most welcome, Ron.

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Top 10 Frequently Asked Questions and Answers
http://www.kellys-korner-xp.com/top10faqs.htm


"Ron Chamberlin" > wrote in message
...
> Nice looking tool Kelly, Thanks for the link.
>
> Ron Chamberlin
> MS-MVP
>
>