Hi forum readers.
I’ve been doing my own research for some time and exhausted all possible avenues(even my good friend Google) but I’m still at an impasse with no straight answer. (even asked Leo!)
My question regards to restricting only certain users from performing various actions using Windows. I’ve been using SiteCafe(from Provisio) for a long time but due to the recession, I’ve had to make some cuts. I don’t charge my members to use our internet but I do want to restrict them from doing anything other than browsing the Internet and playing the games already installed on the systems.
I’ve been using the Group Policy Editor (gpedit.msc) and it does work extremely well but the settings in GPE gets applied to the whole system and not just for a specific user.(user config /computer config)
So I have to leave all the computers insecure just so I can administer them from time to time. i.o.w, I can’t disable the command promt because then I won’t be able to access gpedit.msc any more.
So just to summarize:
Can gpedit.msc be used to only affect certain user accounts? and
Could this be done on a domain to ease administration?
Thanks for reading!