I am trying to setup XP Pro with two accounts, one admin and one limited. I want full access to everything for the admin account but only access to the programs I specify for the limited account. I have tried to create a group policy to do this. I set the default to disallowed and added an exception for each program but in the limited account it says “access has been blocked due to a group policy” or something similar. If I change the default back to unrestricted it says “you must be a member of the administrator group to run this program”. I have followed the intructions at Microsoft’s site but I still can’t get the programs to run under the limited account unless I “Run As” an administrator. How do I get this to work? This is a brand new PC so I am willing to reinstall XP and start from scratch if necessary.
Additional information:
When default is disallowed most programs will not run, Notepad, Command prompt, etc. but Internet Explorer (which I would like to block) still works.
When default is set to unrestricted all programs installed with XP work, just not the ones I installed afterwards.
