Re: How to remove a program from a limited user account on XP

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: pjp (pjp_is_located_at__at__hotmail_._com)
Date: 03/17/04


Date: Wed, 17 Mar 2004 14:27:44 -0400

I'm not on a domain either, just my own four 98SE PCs and this XP one.

>From what I can gather, there's essentially three groups (ommitting Power
Users, BackupOps etc.), Administrator(s), User(s) and Guest.

I also have failed to find any means of setting restrictions on normal "User
A" while leaving nornmal "User B" alone. Help blatantly omits even hinting
at that possibility. Simply changing one of them to one of the other 2
account types is idiotic.

I think I may have found how to create additional Groups but at first glance
setting up the policies for that group is daunting. Again, that also seems
idiotic when one can expect requiring a different policy for every account.

What I expected to find was some tool would allow you to select a specific
account and set "whatever" in exacting detail for only that selected user.
In other words when I'm using gpedit.msc, I expected to be able to designate
a specific user (or a sub-set of the entire user accounts) and then set that
users (or sub-set of users) policy, not an all users or none affair. What
kind of bs is that?

"Steve McLellan" <sjm@fixerlabs.com.NOSPAM> wrote in message
news:OOwDhgEDEHA.3608@TK2MSFTNGP10.phx.gbl...
> You can stick that user in another group, and make sure that the Deny
policy
> you use for that group isn't being overriden by any others. I'm not on a
> domain here so I can't see the appropriate bits in the computer Management
> utility, but you should be able to specify a particular group not to use
an
> application in the same way you can deny access to files and folders. I've
> not had much experience with group policies because I have a tendency to
> irreparably damage things, so I've been forbidden from fiddling about with
> them :-)
>
> Good luck!
>
> Steve
>
> "pjp" <pjp_is_located_at_@_hotmail_._com> wrote in message
> news:%23bs1KxDDEHA.3788@TK2MSFTNGP10.phx.gbl...
> > I'm comfortable mucking around under GPE but I'll be damned if I can
> figure
> > out how you specify for a specific user rather than the whole group?
> Please
> > elaborate.
> >
> > "Steve McLellan" <sjm@fixerlabs.com.NOSPAM> wrote in message
> > news:OwR6QTDDEHA.1544@TK2MSFTNGP09.phx.gbl...
> > > Hi Jen,
> > >
> > > If you've got Windows XP Pro and you're comfortable with Group Policy
> > > editing, that's the native way to do it. I found doing anything with
GPs
> > > unfathomable, but there's a program called 1st Security Agent (Google
> for
> > a
> > > link) that allows really easy and very powerful user account editing.
> It's
> > > shareware I think, but it's well worth buying if you need to do this
> stuff
> > > on a regular basis. Neither I nor the author of the program take any
> > > responsibility for any negative changes it causes (though it's not
> > affected
> > > this machine and I did some pretty serious account fiddling with it).
> > >
> > > Also, Win XP Home doesn't have GP's, but I think the program mentioned
> > above
> > > works on Home. As another cheap 'n' nasty option you could just delete
> the
> > > shortcuts from the Startup group in All Users, but that won't stop
> people
> > > opening it through other means.
> > >
> > > Good luck!
> > >
> > > Steve
> > >
> > > "Jen" <anonymous@discussions.microsoft.com> wrote in message
> > > news:ecd901c40c2e$7273b0f0$a401280a@phx.gbl...
> > > > I have admin user account, and need to remove a program
> > > > only from a limited users account (leaving it accessible
> > > > for the other accounts.)
> > > > How do I do this?
> > > > Thanks so much,
> > > > Jen
> > >
> > >
> >
> >
>
>



Relevant Pages

  • Re: GPO causing client security logs to fill?
    ... a virus in play. ... settings to be applied on your client workstations. ... Group Policy is a complex and often misunderstood beast. ... I modified the account ...
    (microsoft.public.windows.server.sbs)
  • Re: The local policy of this system does not permit you to logon i
    ... Security policies were propagated with warning. ... Error 0x534 occurs when a user account in one or more Group Policy objects ... I have checked the security policies & the administrator profile is not ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO causing client security logs to fill?
    ... Unlink the Default Domain Controller Policy (As it was not previously ... settings to be applied on your client workstations. ... I modified the account ... So basically, the Account lockout threshold, account lockout ...
    (microsoft.public.windows.server.sbs)
  • Re: How to remove a program from a limited user account on XP
    ... > idiotic when one can expect requiring a different policy for every account. ... > users (or sub-set of users) policy, not an all users or none affair. ... >> application in the same way you can deny access to files and folders. ...
    (microsoft.public.windowsxp.general)
  • Re: GPO causing client security logs to fill?
    ... Possibly delete the Default Domoan Controller Policy (As it did not ... issues as it was about recoverying from a virus which appears to ... with client logon failures. ... I modified the account ...
    (microsoft.public.windows.server.sbs)