Re: How to remove a program from a limited user account on XP

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Keith Miller (k.miller79_at_verizon.net)
Date: 03/17/04


Date: Wed, 17 Mar 2004 14:32:36 -0600

Try Doug's Windows XP Security Console

http://www.dougknox.com/xp/utils/index.html

Keith

"pjp" <pjp_is_located_at_@_hotmail_._com> wrote in message
news:%23uxFc5EDEHA.3472@TK2MSFTNGP09.phx.gbl...
> I'm not on a domain either, just my own four 98SE PCs and this XP one.
>
> From what I can gather, there's essentially three groups (ommitting Power
> Users, BackupOps etc.), Administrator(s), User(s) and Guest.
>
> I also have failed to find any means of setting restrictions on normal "User
> A" while leaving nornmal "User B" alone. Help blatantly omits even hinting
> at that possibility. Simply changing one of them to one of the other 2
> account types is idiotic.
>
> I think I may have found how to create additional Groups but at first glance
> setting up the policies for that group is daunting. Again, that also seems
> idiotic when one can expect requiring a different policy for every account.
>
> What I expected to find was some tool would allow you to select a specific
> account and set "whatever" in exacting detail for only that selected user.
> In other words when I'm using gpedit.msc, I expected to be able to designate
> a specific user (or a sub-set of the entire user accounts) and then set that
> users (or sub-set of users) policy, not an all users or none affair. What
> kind of bs is that?
>
> "Steve McLellan" <sjm@fixerlabs.com.NOSPAM> wrote in message
> news:OOwDhgEDEHA.3608@TK2MSFTNGP10.phx.gbl...
> > You can stick that user in another group, and make sure that the Deny
> policy
> > you use for that group isn't being overriden by any others. I'm not on a
> > domain here so I can't see the appropriate bits in the computer Management
> > utility, but you should be able to specify a particular group not to use
> an
> > application in the same way you can deny access to files and folders. I've
> > not had much experience with group policies because I have a tendency to
> > irreparably damage things, so I've been forbidden from fiddling about with
> > them :-)
> >
> > Good luck!
> >
> > Steve
> >
> > "pjp" <pjp_is_located_at_@_hotmail_._com> wrote in message
> > news:%23bs1KxDDEHA.3788@TK2MSFTNGP10.phx.gbl...
> > > I'm comfortable mucking around under GPE but I'll be damned if I can
> > figure
> > > out how you specify for a specific user rather than the whole group?
> > Please
> > > elaborate.
> > >
> > > "Steve McLellan" <sjm@fixerlabs.com.NOSPAM> wrote in message
> > > news:OwR6QTDDEHA.1544@TK2MSFTNGP09.phx.gbl...
> > > > Hi Jen,
> > > >
> > > > If you've got Windows XP Pro and you're comfortable with Group Policy
> > > > editing, that's the native way to do it. I found doing anything with
> GPs
> > > > unfathomable, but there's a program called 1st Security Agent (Google
> > for
> > > a
> > > > link) that allows really easy and very powerful user account editing.
> > It's
> > > > shareware I think, but it's well worth buying if you need to do this
> > stuff
> > > > on a regular basis. Neither I nor the author of the program take any
> > > > responsibility for any negative changes it causes (though it's not
> > > affected
> > > > this machine and I did some pretty serious account fiddling with it).
> > > >
> > > > Also, Win XP Home doesn't have GP's, but I think the program mentioned
> > > above
> > > > works on Home. As another cheap 'n' nasty option you could just delete
> > the
> > > > shortcuts from the Startup group in All Users, but that won't stop
> > people
> > > > opening it through other means.
> > > >
> > > > Good luck!
> > > >
> > > > Steve
> > > >
> > > > "Jen" <anonymous@discussions.microsoft.com> wrote in message
> > > > news:ecd901c40c2e$7273b0f0$a401280a@phx.gbl...
> > > > > I have admin user account, and need to remove a program
> > > > > only from a limited users account (leaving it accessible
> > > > > for the other accounts.)
> > > > > How do I do this?
> > > > > Thanks so much,
> > > > > Jen
> > > >
> > > >
> > >
> > >
> >
> >
>
>



Relevant Pages

  • Re: How to remove a program from a limited user account on XP
    ... idiotic when one can expect requiring a different policy for every account. ... but you should be able to specify a particular group not to use ... > application in the same way you can deny access to files and folders. ...
    (microsoft.public.windowsxp.general)
  • Re: GPO causing client security logs to fill?
    ... a virus in play. ... settings to be applied on your client workstations. ... Group Policy is a complex and often misunderstood beast. ... I modified the account ...
    (microsoft.public.windows.server.sbs)
  • Re: The local policy of this system does not permit you to logon i
    ... Security policies were propagated with warning. ... Error 0x534 occurs when a user account in one or more Group Policy objects ... I have checked the security policies & the administrator profile is not ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO causing client security logs to fill?
    ... Unlink the Default Domain Controller Policy (As it was not previously ... settings to be applied on your client workstations. ... I modified the account ... So basically, the Account lockout threshold, account lockout ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO causing client security logs to fill?
    ... Possibly delete the Default Domoan Controller Policy (As it did not ... issues as it was about recoverying from a virus which appears to ... with client logon failures. ... I modified the account ...
    (microsoft.public.windows.server.sbs)