User rights???

[thehman]

Can i set the non admin account users on my computer running XP Pro to not be
able to access certin settings like the control panel, display properties
services. I tried the gpedit.msc but this takes access away from admin
accounts as well. i only want to restrict access to the normal users. i have
set the %systemDrive% to read and exacute only but i would like for the users
not to be able to even open the conrtol panel. is this possible with having a
server running active directory or is active directory avilible on xp pro?

 

[Malke]

Can i set the non admin account users on my computer running XP Pro to not
be able to access certin settings like the control panel, display
properties services. I tried the gpedit.msc but this takes access away
from admin accounts as well. i only want to restrict access to the normal
users. i have set the %systemDrive% to read and exacute only but i would
like for the users not to be able to even open the conrtol panel. is this
possible with having a server running active directory or is active
directory avilible on xp pro?

Yes, you can do this. You're just not doing it right. One way is to make a
new group for your users and create the restrictions for that group. Don't
put the administrator/administrators into the new group!

Ask questions about using Group Policy in its newsgroup:
microsoft.public.windows.group_policy

Malke

 

[thehman]

Well how do i do it right. i can only find options to change police for
everyone including administrators. I have added the new accounts to the
computer and there in the users group and i will like to change policies for
that group not the admins.

Malke didn't answer my question. he only said it could be done.

Yes, you can do this. You're just not doing it right. One way is to make a
new group for your users and create the restrictions for that group. Don't
put the administrator/administrators into the new group!

Ask questions about using Group Policy in its newsgroup:
microsoft.public.windows.group_policy

Malke didn't give much help and i need to figure this out soon.

 

[marshtric]

Can i set the non admin account users on my computer running XP Pro t
not be
able to access certin settings like the control panel, displa
properties
services. I tried the gpedit.msc but this takes access away from admi

accounts as well. i only want to restrict access to the normal users.
have
set the %systemDrive% to read and exacute only but i would like for th
users
not to be able to even open the conrtol panel. is this possible wit
having a
server running active directory or is active directory avilible on x
pro?

Because of the nature of freelance technical support, people call u
when they need a job done; they don't send an email. The only peopl
who would benefit from our putting an email address on this website ar
spammers, because their spambots will harvest the address. We don'
need body part enlargers. We certainly could use a few millio
dollars, but we know we're not going to get it from the cousin of
deposed Nigerian dictator

 

[Malke]

Well how do i do it right. i can only find options to change police for
everyone including administrators. I have added the new accounts to the
computer and there in the users group and i will like to change policies
for that group not the admins.
Malke didn't give much help and i need to figure this out soon.

Yes, I did. What part of "create a new group for your users" didn't you
understand? What part of "ask questions about using Group Policy in its
newsgroup" was unclear?

If you don't know how to create groups, assign users to them, and put
restrictions on the specific groups, you need to do some reading or get a
professional in to help you.

Google is a great help in finding these answers, and MS TechNet has all the
details you'd need. Here are a few links to get you started:

http://www.tomshardware.com/forum/138686-45-creating-custom-users-group-windows-professional
http://www.winxpsolution.com/ImplGroupXPPro.aspx
http://www.windowsnetworking.com/articles_tutorials/wxppusrm.html
http://www.windowsecurity.com/articles/Windows_XP_Professional_Edition_Local_Security_Policies.html
http://social.technet.microsoft.com/Search/en-US/?query=manage user groups XP Pro&ac=3

Malke

 

[thehman]

i'm sorry that you are so upset. but i think i figured it out and would like
to know if i'm right. SO i creat the group put the users in that group
define a secruity policy and then add that group to the resricted groups
folder. is that correct?

 

[Malke]

i'm sorry that you are so upset. but i think i figured it out and would
like to know if i'm right. SO i creat the group put the users in that
group define a secruity policy and then add that group to the resricted
groups folder. is that correct?

To whom are you speaking? Certainly I'm not upset and I have no idea why
"marshtric" posted that quote from my website. It has nothing to do with
your issue or what we were discussing.

You create a new user group. Call it whatever you want, like "OfficeUsers".
Put whatever users you want into that group *except* for yourself,
administrators, and Administrators. Set restrictions using the Group Policy
Editor (gpedit.msc). Then only the "OfficeUsers" group will have those
restrictions. Read some of the links I sent you for a better understanding
of what you're doing.

Malke