Restriction

[AC]

I need some elucidation concerning user restriction.

I have been trying to assign restriction for a sparticular user within users
group (member of users) without applyint them to my account as a memeber of
administrators.

Trying to perform that in Group Policy setting window - User Configuration -
Administrative Templates the result is applied to my account (member of
administators).

Is there any way of make restriction assigned to a users group or a single
user. Or the only way to do it is 'limit account' setting for a specified
user?

Thank you in advance for any suggestion.

AC
Windows XP Pro SP2

[Malke]

AC wrote:

> I need some elucidation concerning user restriction.
>
> I have been trying to assign restriction for a sparticular user within
> users group (member of users) without applyint them to my account as a
> memeber of administrators.
>
> Trying to perform that in Group Policy setting window - User
> Configuration - Administrative Templates the result is applied to my
> account (member of administators).
>
> Is there any way of make restriction assigned to a users group or a
> single user. Or the only way to do it is 'limit account' setting for a
> specified user?

I'm a little fuzzy about exactly what you want to do, but if I interpret
your post correctly, you want to create a new user group with specific
restrictions with Group Policy Editor. Then assign users to that group.
Don't forget to give yourself rights to that group, too.

Malke
--
MS-MVP Windows User/Shell
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic"

[AC]

Thanks for your reply.

What I try to do is to limit user (User group) performing some tasks without
applying those restrictions to me (my account) this is a user that is a part
of administrators group.

When I apply some restrictions within Group Policy window - User
Configuration - Administrative Templates they are automatically appearing in
my account as a user with administrator privileges.

For instance: I would like to block a user from having access to add/remove
programs option keeping this access for me (user from administrators group).

I think that should not be a case.

Where is the problem then?

AC

When I
"Malke" > wrote in message
...
> AC wrote:
>
>> I need some elucidation concerning user restriction.
>>
>> I have been trying to assign restriction for a sparticular user within
>> users group (member of users) without applyint them to my account as a
>> memeber of administrators.
>>
>> Trying to perform that in Group Policy setting window - User
>> Configuration - Administrative Templates the result is applied to my
>> account (member of administators).
>>
>> Is there any way of make restriction assigned to a users group or a
>> single user. Or the only way to do it is 'limit account' setting for a
>> specified user?
>
> I'm a little fuzzy about exactly what you want to do, but if I interpret
> your post correctly, you want to create a new user group with specific
> restrictions with Group Policy Editor. Then assign users to that group.
> Don't forget to give yourself rights to that group, too.
>
> Malke
> --
> MS-MVP Windows User/Shell
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic"

[Malke]

AC wrote:

> Thanks for your reply.
>
> What I try to do is to limit user (User group) performing some tasks
> without applying those restrictions to me (my account) this is a user
> that is a part of administrators group.
>
> When I apply some restrictions within Group Policy window - User
> Configuration - Administrative Templates they are automatically
> appearing in my account as a user with administrator privileges.
>
> For instance: I would like to block a user from having access to
> add/remove programs option keeping this access for me (user from
> administrators group).
>

Try this Knowledge Base article. Ignore the part about it applying to
Win2K:

How to apply local policies to all users except administrators in a
workgroup setting in Windows 2000

http://support.microsoft.com/default.aspx?scid=kb;en-us;293655

Malke
--
MS MVP - Windows Shell/User
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"

[AC]

I thank you very much. I have already read this article.

It is the method, without doubt.

But I wonder why the <normal< way does not here.

Shall I log as an administrator, or it is sufficient to be logged as an user
from administrators group?

AC


"Malke" > wrote in message
...
> AC wrote:
>
>> Thanks for your reply.
>>
>> What I try to do is to limit user (User group) performing some tasks
>> without applying those restrictions to me (my account) this is a user
>> that is a part of administrators group.
>>
>> When I apply some restrictions within Group Policy window - User
>> Configuration - Administrative Templates they are automatically
>> appearing in my account as a user with administrator privileges.
>>
>> For instance: I would like to block a user from having access to
>> add/remove programs option keeping this access for me (user from
>> administrators group).
>>
>
> Try this Knowledge Base article. Ignore the part about it applying to
> Win2K:
>
> How to apply local policies to all users except administrators in a
> workgroup setting in Windows 2000
>
> http://support.microsoft.com/default.aspx?scid=kb;en-us;293655
>
> Malke
> --
> MS MVP - Windows Shell/User
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"

[Malke]

AC wrote:

> I thank you very much. I have already read this article.
>
> It is the method, without doubt.
>
> But I wonder why the <normal< way does not here.

I don't know. Someone more versed than I in Group Policy probably does
know. You could try posting your question in the newsgroup devoted to
Group Policy questions. Here is a link to a list of all the MS
newsgroups:

http://aumha.org/nntp.htm
>
> Shall I log as an administrator, or it is sufficient to be logged as
> an user from administrators group?

AFAIK, any account with administrative privileges can do anything
administratively. But again, I would ask the question in the Group
Policy newsgroup.

Malke
--
MS MVP - Windows Shell/User
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"