Re: restricted account

From: Jay (nospam_at_*here.com)
Date: 06/17/04 

Date: Thu, 17 Jun 2004 12:34:07 +1200

"Wesley Vogel" <123WVogel955@comcast.net> wrote in message
news:hv2Ac.102247$3x.9039@attbi_s54...
> Open Help and Support | Paste:
>
> Groups and default security settings
>
> in the Search box | Click the green arrow
>
> --
> Hope this helps. Let us know.
> Wes

Thanks Wes,
Looks like I'm heading in the right direction.
Group Policy-User config-templates looks like what I'm after.
I tested it by removing the add/remove programs under administrative
templates.
Problem being it then stopped me from going in! and I'm in the
administrators group.
I want to be able to create policies for either a named user or for the
restricted account group.
I'll have a proper later when I get home from work.

Thanks again
Jay

> In news:wl1Ac.294$LT3.14597@news.xtra.co.nz,
> Jay <nospam@*here.com> hunted and pecked:
> > "Wesley Vogel" <123WVogel955@comcast.net> wrote in message
> > news:Ut0Ac.101679$3x.25722@attbi_s54...
> >> From XP HELP:
> >> Restricted Groups policy
> >
> > Thanks, the question was what can it do as opposed to what is it.
> > Can a restricted account user... install, uninstall, back-up etc etc
> >
> > Jay
> >
> >
> >> [[You can use Restricted Groups policy to control group membership.
> >> Using the policy, you can specify what members are part of a group.
> >> Any members that are not specified in the policy are removed during
> >> configuration or refresh. In addition, the reverse membership
> >> configuration option ensures that each Restricted Group is a member
> >> of only those groups specified in the Member Of column.
> >>
> >> For example, you can create a Restricted Groups policy to only allow
> >> specified users (for example, Alice and John) to be members of the
> >> Administrators group. When policy is refreshed, only Alice and John
> >> will remain as members of the Administrators group.
> >>
> >> There are two ways to apply Restricted Groups policy:
> >>
> >> Define the policy in a security template which will be applied during
> >> configuration on your local computer or when you import the security
> >> template to a Group Policy object.
> >> Define the setting on a Group Policy object directly which would
> >> mean the policy would go into effect with the next refresh of
> >> policy. The security settings are refreshed every 90 minutes on a
> >> workstation or server and every 5 minutes on a domain controller.
> >> The settings are also refreshed every 16 hours, whether or not there
> >> are any changes. Caution
> >>
> >> If a Restricted Groups policy is defined and Group Policy is
> >> refreshed, any current member not on the Restricted Groups policy
> >> members list is removed. This can include default members, such as
> >> administrators. Important
> >>
> >> Restricted Groups should be used primarily to configure membership
> >> of local groups on workstation or member servers. ]]
> >>
> >> --
> >> Hope this helps. Let us know.
> >> Wes
> >>
> >> In news:hLRzc.120$LT3.3200@news.xtra.co.nz,
> >> Jay <nospam@*here.com> hunted and pecked:
> >>> Looked in help....
> >>> What can/can't a restricted account do?
> >>> I'm from a win2k background so am used to creating new users and
> >>> customising their limitations.

Relevant Pages

  • RE: Please Help - Shutdown - Restart Issue
    ... U must b the local admin user, or, a user in the administrators group. ... > When I came back to office and tried to connect to my office domain I ... > How can I reset all my security settings to default? ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Hierarchy of groups and users
    ... Groups and default security settings ... Wes ... MS-MVP Windows Shell/User ... > Builtin/Administrators ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: XBox 360 wont act as media center
    ... I added MCX5 to my administrators group ... Perhaps my security settings were preventing ... any non-admin to log in remotely. ...
    (microsoft.public.windows.mediacenter)