Re: >>Can't run gpedit.msc from user account<<
From: Wayne B. (MrCmosDriver_at_aolnott.com)
Date: 05/22/04
- Next message: Michael Kilgore: "RE: Power Option"
- Previous message: Mark F: "Re: lsass.exe is missing on our w2k server and cannot be restored"
- In reply to: Pegasus \(MVP\): "Re: >>Can't run gpedit.msc from user account<<"
- Next in thread: Pegasus \(MVP\): "Re: >>Can't run gpedit.msc from user account<<"
- Reply: Pegasus \(MVP\): "Re: >>Can't run gpedit.msc from user account<<"
- Messages sorted by: [ date ] [ thread ]
Date: Fri, 21 May 2004 23:02:43 -0700
If you would refer back to my original post, it states,
>> I want to lockdown the desktop, delete 'run', make the
control panel inaccessible, things of that nature. <<
I'm not seeing any of those things in 'Computer
Configuration'. To the best of my >limited< knowledge,
they are only available in User Configuration /
Administrative Templates / Start Menu & Taskbar as well
as Desktop and Control Panel.
I've have also gone here
http://support.microsoft.com/default.aspx?scid=kb;en-
us;q293655
to try to get this done but in order to do what it's
saying, you have to be logged in as a user, but then you
can't run gpedit.msc nor group policy within the mmc. The
users group is restricted from utilizing both of those
functions.
Wayne B.
>-----Original Message-----
>Since you did not tell me which policy you're trying
>to modify, I'll take the policy that says who is allowed
>to set the system clock:
>
>Local Computer Policy / Computer Configuration /
>Windows Settings / Security Settings / Local Policies /
>User Right Assignments / Change System Time.
>Double-clicking this policy gives me a screen that
>lets me add users and/or groups, and place tick marks
>to say if they are / are not allowed to change the
>system time.
>
>
>"Wayne B." <MrCmosDriver@aolnott.com> wrote in message
>news:1073201c43fba$1244c420$a301280a@phx.gbl...
>> Well Pegasus, I'm glad it's obvious to you because it's
>> giving me the frickin flux. So what do I need to do
to
>> specify the accounts that I want restricted? The
drop-
>> down list under 'action' gives, (Export List,
Properties
>> and Help). The drop-down list under view gives (choose
>> columns, the view choices, DC Options and customize).
>>
>> Am I in the correct window or what because I can't see
>> where I would do what you're referring to. Just one
more
>> kick in the right direction please, I GOT to almost be
>> there. THANX. Wayne B.
>>
>>
>> >-----Original Message-----
>> >When you run gpedit.msc then you are given the
>> opportunity
>> >to specify what restrictions apply to which types of
>> accounts.
>> >The obvious answer is: Restrict user accounts but
enable
>> >admin accounts.
>> >
>> >
>> >"Wayne B." <anonymous@discussions.microsoft.com> wrote
>> in message
>> >news:107ea01c43fb3$706a5850$a401280a@phx.gbl...
>> >>
>> >> Yehh I know, I don't want my account to be
restricted
>> >> on anything in anyway. I thought that there was a
way
>> of
>> >> locking down a user account w/o affecting the
>> >> administrator accounts. Are you saying that there
is no
>> >> way to do this (without) affecting my admin
>> >> account??? Wayne B.
>> >>
>> >>
>> >>
>> >> >
>> >> >You must run gpedit from an admin account. The
changes
>> >> >you make will affect the user accounts too.
>> >> >
>> >> >
>> >> >.
>> >> >
>> >
>> >
>> >.
>> >
>
>
>.
>
- Next message: Michael Kilgore: "RE: Power Option"
- Previous message: Mark F: "Re: lsass.exe is missing on our w2k server and cannot be restored"
- In reply to: Pegasus \(MVP\): "Re: >>Can't run gpedit.msc from user account<<"
- Next in thread: Pegasus \(MVP\): "Re: >>Can't run gpedit.msc from user account<<"
- Reply: Pegasus \(MVP\): "Re: >>Can't run gpedit.msc from user account<<"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
