User rights???

Can i set the non admin account users on my computer running XP Pro to not be
able to access certin settings like the control panel, display properties
services. I tried the gpedit.msc but this takes access away from admin
accounts as well. i only want to restrict access to the normal users. i have
set the %systemDrive% to read and exacute only but i would like for the users
not to be able to even open the conrtol panel. is this possible with having a
server running active directory or is active directory avilible on xp pro?

thehman wrote:

Can i set the non admin account users on my computer running XP Pro to not
be able to access certin settings like the control panel, display
properties services. I tried the gpedit.msc but this takes access away
from admin accounts as well. i only want to restrict access to the normal
users. i have set the %systemDrive% to read and exacute only but i would
like for the users not to be able to even open the conrtol panel. is this
possible with having a server running active directory or is active
directory avilible on xp pro?

Yes, you can do this. You're just not doing it right. One way is to make a
new group for your users and create the restrictions for that group. Don't
put the administrator/administrators into the new group!

Ask questions about using Group Policy in its newsgroup:
microsoft.public.windows.group_policy

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

Well how do i do it right. i can only find options to change police for
everyone including administrators. I have added the new accounts to the
computer and there in the users group and i will like to change policies for
that group not the admins.

Malke didn't answer my question. he only said it could be done.
"Malke" wrote in message
...
thehman wrote:

Can i set the non admin account users on my computer running XP Pro to
not
be able to access certin settings like the control panel, display
properties services. I tried the gpedit.msc but this takes access away
from admin accounts as well. i only want to restrict access to the normal
users. i have set the %systemDrive% to read and exacute only but i would
like for the users not to be able to even open the conrtol panel. is this
possible with having a server running active directory or is active
directory avilible on xp pro?

Yes, you can do this. You're just not doing it right. One way is to make a
new group for your users and create the restrictions for that group. Don't
put the administrator/administrators into the new group!

Ask questions about using Group Policy in its newsgroup:
microsoft.public.windows.group_policy


Malke didn't give much help and i need to figure this out soon.
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

Originally Posted by thehman

Can i set the non admin account users on my computer running XP Pro to not be
able to access certin settings like the control panel, display properties
services. I tried the gpedit.msc but this takes access away from admin
accounts as well. i only want to restrict access to the normal users. i have
set the %systemDrive% to read and exacute only but i would like for the users
not to be able to even open the conrtol panel. is this possible with having a
server running active directory or is active directory avilible on xp pro?

Because of the nature of freelance technical support, people call us when they need a job done; they don't send an email. The only people who would benefit from our putting an email address on this website are spammers, because their spambots will harvest the address. We don't need body part enlargers. We certainly could use a few million dollars, but we know we're not going to get it from the cousin of a deposed Nigerian dictator.

thehman wrote:

Well how do i do it right. i can only find options to change police for
everyone including administrators. I have added the new accounts to the
computer and there in the users group and i will like to change policies
for that group not the admins.

Yes, you can do this. You're just not doing it right. One way is to make
a new group for your users and create the restrictions for that group.
Don't put the administrator/administrators into the new group!

Ask questions about using Group Policy in its newsgroup:
microsoft.public.windows.group_policy


Malke didn't give much help and i need to figure this out soon.

Yes, I did. What part of "create a new group for your users" didn't you
understand? What part of "ask questions about using Group Policy in its
newsgroup" was unclear?

If you don't know how to create groups, assign users to them, and put
restrictions on the specific groups, you need to do some reading or get a
professional in to help you.

Google is a great help in finding these answers, and MS TechNet has all the
details you'd need. Here are a few links to get you started:

http://www.tomshardware.com/forum/13...s-professional
http://www.winxpsolution.com/ImplGroupXPPro.aspx
http://www.windowsnetworking.com/art.../wxppusrm.html
http://www.windowsecurity.com/articl...ol icies.html
http://social.technet.microsoft.com/...0XP%20Pro&ac=3

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

i'm sorry that you are so upset. but i think i figured it out and would like
to know if i'm right. SO i creat the group put the users in that group
define a secruity policy and then add that group to the resricted groups
folder. is that correct?
"marshtric" wrote in message
...

thehman;3230751 Wrote:
Can i set the non admin account users on my computer running XP Pro to
not be
able to access certin settings like the control panel, display
properties
services. I tried the gpedit.msc but this takes access away from admin

accounts as well. i only want to restrict access to the normal users. i
have
set the %systemDrive% to read and exacute only but i would like for the
users
not to be able to even open the conrtol panel. is this possible with
having a
server running active directory or is active directory avilible on xp
pro?

Because of the nature of freelance technical support, people call us
when they need a job done; they don't send an email. The only people
who would benefit from our putting an email address on this website are
spammers, because their spambots will harvest the address. We don't
need body part enlargers. We certainly could use a few million
dollars, but we know we're not going to get it from the cousin of a
deposed Nigerian dictator.




--
marshtric

thehman wrote:

i'm sorry that you are so upset. but i think i figured it out and would
like to know if i'm right. SO i creat the group put the users in that
group define a secruity policy and then add that group to the resricted
groups folder. is that correct?

To whom are you speaking? Certainly I'm not upset and I have no idea why
"marshtric" posted that quote from my website. It has nothing to do with
your issue or what we were discussing.

You create a new user group. Call it whatever you want, like "OfficeUsers".
Put whatever users you want into that group *except* for yourself,
administrators, and Administrators. Set restrictions using the Group Policy
Editor (gpedit.msc). Then only the "OfficeUsers" group will have those
restrictions. Read some of the links I sent you for a better understanding
of what you're doing.

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ