Windows Forum

Ask something
Discussion Locked

W2K Security Policies - implementing off

0 helpful
2 replies

by mike.brooks

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
We have just bought a number of laptops for our Rep's, on each laptop we have an Admin Account and a User Account. I would like to implement some security model so that each user account only has limited access to certain areas of the machine (e.g. No Access to Control Panel or Internet Explorer etc.), under NT I implemented this on our network with a local security policy. How can I achieve the same sort of thing on a standalone laptop not connected to our network, as I understand it the GroupPolicy editor on W2K only works for machines connected to a network? If this can only be achieved by changing registry settings manually how do I find out the relevant registry settings?

2 replies

by oliver w.

Hi!
It's simple
Start / Run / mmc.exe (The Management Console)
Now you get an empty console and you can add certain PlugIns. When you look at the available PlugIns you will find "Local Computer Policy" - That's it.

hope that helps
Oliver

by mike.brooks

This will apply a policy to all accounts, however I have found the workaround in a Tech Republic article as follows: -
Here's how to fool Windows 2000 Professional into using different restrictions for users:
1. Log on as Administrator.
2. Go to Start | Run and enter GPEDIT.MSC in the Open dialog box to start the Group Policy console.
3. Open the User Configuration/Administrative Templates branch and change settings as desired to enable restrictions as needed. The settings for each restriction vary.
4. Close the Group Policy console and log off, then log back on again as Administrator to apply the change.
5. Log off and log on as another user to verify that the restrictions are applied. Log off and then log on as each of the other users, in turn, to whom you want to apply the restrictions.
6. Log on as Administrator and copy the file %systemroot%\System32\GroupPolicy\User\registry.pol to a
backup location and name it UserReg.pol. Copy the file %systemroot%\System32\GroupPolicy\Machine\regist

This discussion is closed to new replies.