Windows XP PRO, gpedit

hello! i can answer your question but i don't know how to provide screenshots. what i can do is provide a step-by-step instruction:
1)Start-Control Panel-Administrative Tools-Local Security Policy.
2) In the Local Security Policy dialogue box, on the left pane under the Security Settings, expand Local Policies, click User Rights and Assignment.
3) On the right pane, under Policy, right click anything that you like to modify and then click properties.
4)On the properties page you can remove or add users from the list, then click ok or apply.
* The steps above can be performed on the local workstation using and Administrator account.
Let me know if this helps:)

We had this same problem before. What we ended up doing is setting the Group Policy how we wanted it then, before you reboot, under C:\Windows\System32 we changed permissions on the Group Policy folder so Admin did not have read permissions.

Have you considered adjusting the properties by right clicking on my computer and selecting "manage"? From there, select Local Users and Groups under System Tools. If it's just simple file access (or lack thereof) that you're trying to configure, you could simply set the permissions on that folder/file. Your question is actually pretty vague so more info would be helpful...What/how do you want to limit the user?

Well the above is great accept it applies to Local Policy only and not Group policy. If I am not mistaken, there is no way to administer Group Policy per user locally. That would require Active Directory. Of course I could have misread the question.....just my $.02

There are several ways to access and change policies on the local computer. It is possible to do them remotely through AD, but I find the best way to do it locally is NOT through the Local security policy in Admin Tools.

You could do Start>Run>mmc and add a snapin for the local machine group policy... but this is quite a process. I think the easiest way to get there is to download and install the powertoy TweakUI.
http://download.microsoft.com/download/f/c/a/fca6767b-9ed9-45a6-b352-839afb2a2679/TweakUiPowertoySetup.exe

You'll find all kinds of things to play with in this powertoy, but whats really great is under the first bucket: (About>Policy) You can click the Run Group Policy Editor button and it shortcuts to a mmc editor for your local machine. No need to add any snap-ins.

Then follow the same steps that Aggy detailed in Answer1.

I find this is the easiest way to edit Group Policy on a local machine.

Is it not possible to set up a special group just for that person, with the appropriate group policy?

Local Policy can be edited per user, Global Policy cannot as it affects all users on the machine. At least that is what I remember. Can someone prove me wrong? Otherwise why was my answer rejected?

Hmmm. Well I was always told and under the impression and GPO is global and not user specific. So I guess we both will learn something then. Thanks for your response.

I think you should also try these steps and see.Before you start that log on as an administrator.
1.Go to control panel,computer management at the left pane expand local users and groups then click on groups.
2.On the right pane you'll see about eight policies over there i.e administrators,guest,power user,users etc.At the description end it mention that users are restricted from doing certain things.
3. Right click on users then properties you see how users are group and then from there you can assign certain policies that will add or remove and affect the user from doing certain things.

nii ayi

I think you should also try these steps and see.Before you start that log on as an administrator.
1.Go to control panel,computer management at the left pane expand local users and groups then click on groups.
2.On the right pane you'll see about eight policies over there i.e administrators,guest,power user,users etc.At the description end it mention that users are restricted from doing certain things.
3. Right click on users then properties you see how users are group and then from there you can assign certain policies that will add or remove and affect the user from doing certain things.

nii ayi

I have same Problem regarding group policy for
(Windows XP PRO, gpedit explain how you set up group plocies on Windows XP locally, that only affects one certain user, eg fred, but it does not affect the Administrator?)can you send me the solution ..........please Thanks

AMSv2010 is now Available in my Web

Visit: http://naldo-project.weebly.com

It's a True Windows Solutions 100% Secure and Tested

Over 500 Administrator Restriction and Secret, Video Capture, iPod, Secret Panel, Internet Explorer Inside, Windows Registry, Windows Service, Restrict Devices, Backup Options, Screen Capture, User Manager, Legal Notice Caption and Text, System Information, Control Panel, Delete Files, Copy & Paste, NotePad, View IP, Windows Time, Keyfinder, Memory Information, Ad or Remove Programs, Startup List, View Restriction from System and Explorer, All Groups Policy Management (GPEDIT), All MMC Restrictions, Shutdown Timer, Shutdown, Hibernate, Restart, Logoff, more..., MDI Parent View Option, Task Manager Inside, Keyloger, Hidden and View Files, See the Video... more... more... more.

* Protect this Software with Password and Secure Password, Startup Option, Icon Tray Option*.

It's a Administrator Perfect Software and Tool

***Recommend this program to your friends***

by Naldo (AMSv2010 Developer, Designer, Author) Future MVP ((Most Valuable Professional) / Puerto Rico and Expert in Administrator Restrictions for Windows XP PRO, HOME, Vista and Windows 7 BETA in test and specifically to test Windows 7 has several restrictions.