How do you create Computer policies that only apply to one group? I need to put some strict restrictions on what a user can do, but I do not want to apply these restrictions to the Administrator.
Thanks,
Warren
This conversation is currently closed to new comments.
Ok this needs some planning The best way is that goto the properties of each Folder that you want to restrict Choose Properties by right clicking and choosing properties
Goto the Security Tab and allow full access to the Administrators Group Now if you see the "Users" Group there Take which ever permissions you want to revoke from users and grant which ever Priviliges you feel like
If you want to apply it on the whole Drives then it would be really easy for you All you have to do is to do the same steps for on the Drive Properties
You may need to first download it from MS. The Group Policy Management console is a great tool to create and link GPO's.
Once you open the GPO in the console, you can specify what groups get the policy in the security filtering section (scope tab). Additionally, you can then set deny access permissions for groups you dont want to get the policy (delegation tab and "advanced").
Be sure and test your policies on test groups before deploying them on a large scale, as some settings may have unintended consequences. A great resource for policies is the book "Group Policy, Profiles, and IntelliMirror for Windows 2003, Windows XP and Windows 2000" by Jeremy Moskowitz.
If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.
XP Group Only Computer Policies
Thanks,
Warren