Windows Forum

Ask something
Discussion Locked

XP Group Only Computer Policies

0 helpful
4 replies

by warren

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

How do you create Computer policies that only apply to one group? I need to put some strict restrictions on what a user can do, but I do not want to apply these restrictions to the Administrator.

Thanks,

Warren

4 replies

by haunted.hawk

Ok this needs some planning
The best way is that goto
the properties of each Folder that you want to restrict
Choose Properties by right clicking and choosing properties

Goto the Security Tab
and allow full access to the Administrators Group
Now if you see the "Users" Group there
Take which ever permissions you want to revoke from users and grant which ever Priviliges you feel like

If you want to apply it on the whole Drives then it would be really easy for you
All you have to do is to do the same steps for on the Drive Properties

Hope this'll Solve your Problem

by systemsgod

You may need to first download it from MS. The Group Policy Management console is a great tool to create and link GPO's.

Once you open the GPO in the console, you can specify what groups get the policy in the security filtering section (scope tab). Additionally, you can then set deny access permissions for groups you dont want to get the policy (delegation tab and "advanced").

Be sure and test your policies on test groups before deploying them on a large scale, as some settings may have unintended consequences. A great resource for policies is the book "Group Policy, Profiles, and IntelliMirror for Windows 2003, Windows XP and Windows 2000" by Jeremy Moskowitz.

This discussion is closed to new replies.