Re: Create New User Group and set permissions\limits

Hi Dan

OK. It sounds like it may work well for you and that you are on track for
success. I will leave it up to you as how to best handle family issues. I
met Doug at a meeting up at Redmond last November. Thank you for your
service to our country and it was an honor to help you! --- Steve


"dan" <dm@xxxxxxxxxxx> wrote in message
news:%23WMotXnWFHA.3716@xxxxxxxxxxxxxxxxxxxxxxx
> Steve,
>
> Thanks, I have it now but have not applied it. It will let you apply some
> Group Policy by user. All the users are in a window and I can chose a user
> and change settings for that user only. It will not affect any other user
> or group. I am disabled from the first Iraq war (Gulf War) the family
> member that will change settings is my daughter I do not want to have any
> conflicts or issues with her, I am just glad to be here. So I would rather
> fix the computer so she can not do anything than fuss with her, each day
> is a gift to me. My wife has the encrypted files as she is still employed
> by federal government. I do not even have the passwords\keys to them.
> Again thanks for all your help and advice. Sounds like you may know Mr.
> Knox!
>
> Dan
>
>
> "Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxx> wrote in message
> news:OIwLOplWFHA.712@xxxxxxxxxxxxxxxxxxxxxxx
>>I have looked at it in the past but never tried it out. If I remember
>>correctly it can assign some Group/security Policy settings based on group
>>membership for the local computer. I would definitely give it a try if you
>>think it will do what you want. Doug has a great variety of tips on
>>getting the most from XP and is a pretty decent pool player too. ---
>>Steve
>>
>>
>> "dan" <dm@xxxxxxxxxxx> wrote in message
>> news:utK5mokWFHA.2692@xxxxxxxxxxxxxxxxxxxxxxx
>>> Steven, Glenn
>>>
>>> I also came across a small utility "Windows XP Security Console" by Doug
>>> Knox at www.dougknox.com that looks like it will do most of what I want.
>>> Have you seen this small program or know anything about it. Thanks for
>>> you time.
>>>
>>> Dan
>>>
>>>
>>> "Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxx> wrote in message
>>> news:OvERJ%23bWFHA.796@xxxxxxxxxxxxxxxxxxxxxxx
>>>> On a stand alone computer Group Policy is not really meant to apply to
>>>> different groups like it is in an Active Directory domain environment.
>>>> There are a couple of hacks that you could try to exempt a group from
>>>> Local Group Policy that normally applies to ALL users on a local
>>>> computer. For this to work best you will want to configure Group Policy
>>>> exactly the way you want it before you enable the hacks. Also for XP
>>>> pro you can use Software Restriction Policies on a computer which are
>>>> very powerful and by default local administrators are exempt from SRP.
>>>> I would make sure that the "limited accounts" are only regular user
>>>> accounts. You also should use ntfs permissions to restrict what folders
>>>> a non admin user can access on your computer and what executables they
>>>> can run. If you have a family member that refuses to cooperate I would
>>>> consider barring them from using the computer and not give them a user
>>>> account. You should beware that any user with malicious intentions that
>>>> has full access to the computer could probably gain administrator
>>>> access with a little knowlege. Using encryption with proper precautions
>>>> can however prevent any user who does not have the private keys for
>>>> decryption from accessing the encrypted files. The links below may
>>>> lp. --- Steve
>>>>
>>>> http://www.jsifaq.com/sube/tip2400/rh2492.htm
>>>> http://support.microsoft.com/default.aspx?scid=kb;en-us;308418
>>>> http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx
>>>> http://support.microsoft.com/default.aspx?scid=KB;en-us;q300958
>>>>
>>>> "dan" <dm@xxxxxxxxxxx> wrote in message
>>>> news:OxqX%23DZWFHA.1404@xxxxxxxxxxxxxxxxxxxxxxx
>>>>> Hello, I want to create a New User Group (Visitors) and set very
>>>>> limited permissions\limits using Group Policy Editor. This is on a
>>>>> stand alone computer running Win XP Pro sp2. I have family members
>>>>> visit and use the computer but I do not want them to be able to change
>>>>> setting or install programs. I want them to be able use the internet
>>>>> and use Microsoft Office. I would create a new user account (family)
>>>>> to add to the new group and it would only be in that group. I know how
>>>>> to create the new group and the new account. I do not now how to set
>>>>> permissions\limits using the Group Policy Editor for a new group. I am
>>>>> a novice at doing any of this. I have "use simple file sharing"
>>>>> unchecked. Can this be done for one group and then the account could
>>>>> only use the computer for what I am looking for, is it something I
>>>>> could do? I have an account and my wife has an account on this same
>>>>> computer. There are some very sensitive files on the computer which
>>>>> are encrypted with PGP, but I do not want the visitors changing and
>>>>> looking all over the computer. We have one family member that will
>>>>> look and change settings even after we ask her not to. I would like an
>>>>> account in a group that would stop her and not have a big issue. Just
>>>>> tell her use this one or none. Thank you for any help or advice.
>>>>>
>>>>> Dan
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>


.

Relevant Pages