Windows·65,544 discussions

Windows XP PRO, gpedit

Locked

Could anyone please explain how you set up group plocies on Windows XP locally, that only affects one certain user, eg fred, but it does not affect the Administrator?
Anyone who answers could u plz provide notes with screenshots.
Many thanks

Topic

Reply To: Windows XP PRO, gpedit

In reply to Windows XP PRO, gpedit

hello! i can answer your question but i don’t know how to provide screenshots. what i can do is provide a step-by-step instruction:
1)Start-Control Panel-Administrative Tools-Local Security Policy.
2) In the Local Security Policy dialogue box, on the left pane under the Security Settings, expand Local Policies, click User Rights and Assignment.
3) On the right pane, under Policy, right click anything that you like to modify and then click properties.
4)On the properties page you can remove or add users from the list, then click ok or apply.
* The steps above can be performed on the local workstation using and Administrator account.
Let me know if this helps:)

Reply To: Windows XP PRO, gpedit

In reply to Windows XP PRO, gpedit

We had this same problem before. What we ended up doing is setting the Group Policy how we wanted it then, before you reboot, under C:\Windows\System32 we changed permissions on the Group Policy folder so Admin did not have read permissions.

Reply To: Windows XP PRO, gpedit

In reply to Reply To: Windows XP PRO, gpedit

Poster rated this answer.

Reply To: Windows XP PRO, gpedit

In reply to Windows XP PRO, gpedit

Have you considered adjusting the properties by right clicking on my computer and selecting “manage”? From there, select Local Users and Groups under System Tools. If it’s just simple file access (or lack thereof) that you’re trying to configure, you could simply set the permissions on that folder/file. Your question is actually pretty vague so more info would be helpful…What/how do you want to limit the user?

Reply To: Windows XP PRO, gpedit

In reply to Reply To: Windows XP PRO, gpedit

Poster rated this answer.

Reply To: Windows XP PRO, gpedit

In reply to Windows XP PRO, gpedit

Well the above is great accept it applies to Local Policy only and not Group policy. If I am not mistaken, there is no way to administer Group Policy per user locally. That would require Active Directory. Of course I could have misread the question…..just my $.02

Reply To: Windows XP PRO, gpedit

In reply to Reply To: Windows XP PRO, gpedit

misread the question

Reply To: Windows XP PRO, gpedit

In reply to Windows XP PRO, gpedit

There are several ways to access and change policies on the local computer. It is possible to do them remotely through AD, but I find the best way to do it locally is NOT through the Local security policy in Admin Tools.

You could do Start>Run>mmc and add a snapin for the local machine group policy… but this is quite a process. I think the easiest way to get there is to download and install the powertoy TweakUI.
http://download.microsoft.com/download/f/c/a/fca6767b-9ed9-45a6-b352-839afb2a2679/TweakUiPowertoySetup.exe

You’ll find all kinds of things to play with in this powertoy, but whats really great is under the first bucket: (About>Policy) You can click the Run Group Policy Editor button and it shortcuts to a mmc editor for your local machine. No need to add any snap-ins.

Then follow the same steps that Aggy detailed in Answer1.

I find this is the easiest way to edit Group Policy on a local machine.

Reply To: Windows XP PRO, gpedit

In reply to Windows XP PRO, gpedit

Is it not possible to set up a special group just for that person, with the appropriate group policy?

Reply To: Windows XP PRO, gpedit

In reply to Reply To: Windows XP PRO, gpedit

Poster rated this answer.

Reply To: Windows XP PRO, gpedit

In reply to Windows XP PRO, gpedit

Local Policy can be edited per user, Global Policy cannot as it affects all users on the machine. At least that is what I remember. Can someone prove me wrong? Otherwise why was my answer rejected?

Reply To: Windows XP PRO, gpedit

In reply to Reply To: Windows XP PRO, gpedit

Its true you can do that, but it is possible to edit globalpolicy to affect only one user- but dont know how, thats why im asking 🙁

Reply To: Windows XP PRO, gpedit

In reply to Windows XP PRO, gpedit

Hmmm. Well I was always told and under the impression and GPO is global and not user specific. So I guess we both will learn something then. Thanks for your response.

Reply To: Windows XP PRO, gpedit

In reply to Windows XP PRO, gpedit

I think you should also try these steps and see.Before you start that log on as an administrator.
1.Go to control panel,computer management at the left pane expand local users and groups then click on groups.
2.On the right pane you’ll see about eight policies over there i.e administrators,guest,power user,users etc.At the description end it mention that users are restricted from doing certain things.
3. Right click on users then properties you see how users are group and then from there you can assign certain policies that will add or remove and affect the user from doing certain things.

nii ayi

Reply To: Windows XP PRO, gpedit

In reply to Windows XP PRO, gpedit

I think you should also try these steps and see.Before you start that log on as an administrator.
1.Go to control panel,computer management at the left pane expand local users and groups then click on groups.
2.On the right pane you’ll see about eight policies over there i.e administrators,guest,power user,users etc.At the description end it mention that users are restricted from doing certain things.
3. Right click on users then properties you see how users are group and then from there you can assign certain policies that will add or remove and affect the user from doing certain things.

nii ayi

Reply To: Windows XP PRO, gpedit

In reply to Windows XP PRO, gpedit

I have same Problem regarding group policy for
(Windows XP PRO, gpedit explain how you set up group plocies on Windows XP locally, that only affects one certain user, eg fred, but it does not affect the Administrator?)can you send me the solution ……….please Thanks

AMSv2010 is a true solution for Windows XP PRO and HOME

In reply to Windows XP PRO, gpedit

AMSv2010 is now Available in my Web

Visit: http://naldo-project.weebly.com

It’s a True Windows Solutions 100% Secure and Tested

Over 500 Administrator Restriction and Secret, Video Capture, iPod, Secret Panel, Internet Explorer Inside, Windows Registry, Windows Service, Restrict Devices, Backup Options, Screen Capture, User Manager, Legal Notice Caption and Text, System Information, Control Panel, Delete Files, Copy & Paste, NotePad, View IP, Windows Time, Keyfinder, Memory Information, Ad or Remove Programs, Startup List, View Restriction from System and Explorer, All Groups Policy Management (GPEDIT), All MMC Restrictions, Shutdown Timer, Shutdown, Hibernate, Restart, Logoff, more…, MDI Parent View Option, Task Manager Inside, Keyloger, Hidden and View Files, See the Video… more… more… more.

* Protect this Software with Password and Secure Password, Startup Option, Icon Tray Option*.

It’s a Administrator Perfect Software and Tool

***Recommend this program to your friends***

by Naldo (AMSv2010 Developer, Designer, Author) Future MVP ((Most Valuable Professional) / Puerto Rico and Expert in Administrator Restrictions for Windows XP PRO, HOME, Vista and Windows 7 BETA in test and specifically to test Windows 7 has several restrictions.

[Author]

Replies