Re: Local GP for just 1 user



JSI tip 2492 always works for me if I want to prevent local Group Policy
from applying to users that have deny read permissions to the Group Policy
folders. The problem though is that you can not edit the local Group Policy
unless you restore read permissions to the administrator and then too
restrictive policy settings could prevent him from editing Group Policy in a
Catch 22 situation. Remote management of Group Policy may still be possible
however.

You may also want to look at the Windows Shared Computer Toolkit that allows
you do configure different settings per user though it does not have all the
GP settings but still goes a long way toward locking down a user. There is
also a dedicated newsgroup for it that is currently heavily monitored and
responding to posts from users by Microsoft. --- Steve

http://www.microsoft.com/windowsxp/sharedaccess/default.mspx --- Shared
Computer Toolkit link. Works only on XP SP2.

"amir" <amir@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:23826586-231B-4931-A4BE-10AA2C4A3019@xxxxxxxxxxxxxxxx
> hi ,
>
> how can i make group policy changes for just a winXP user (ex:user1) in a
> standalone pc, in windows xp professional.
> By Default , changes that we've made in user configuration in group policy
> ,
> affects in all user of windows (ex:Administrator ,....) .(i don't like
> this)
> i have seen tip 2492 in jsifaq.com & it didn't help me !
> please help ,
> thanx,
> best regards .


.



Relevant Pages

  • Re: Problems configuring security for services
    ... I would think that the permissions you describe should be fine. ... thought that those permissions on the services in the Group Policy were ... you see what's wrong by looking in the Windows security Event Log. ... > settings to try to reset ...
    (microsoft.public.win2000.security)
  • Re: Automated logoff using Winexit.scr
    ... Keep in mind that when you change registry permissions via GP ... registry settings at the domain level but instead do via an OU. ... are not servers in our domain. ... Authenticated Users have the Apply Group Policy permission defined. ...
    (microsoft.public.windows.group_policy)
  • Re: Local Policy Update Using Remote Registry Edit
    ... Keep in mind that domain profile settings apply only when domain computer ... You can edit local Group Policy remotely by selecting the mmc ... find it always best to edit Group Policy instead of registry settings. ... Is there a way to remotely edit the local group policy of a Windows XP ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Problem applying custom Group Policy
    ... I have tested to make some settings in Computer Configuration (in ... Microsoft Windows 2000 Operating System Group Policy Result ... Local Group Policy ...
    (microsoft.public.windows.server.active_directory)
  • Re: file permission scripting
    ... that works fine but I prefer to have some sort of script to perform this ... I do not want to delegate permissions to this OU to this user ... you can work with standard Group Policy mechanisms. ... Configuration - Windows Settings - Security Settings - File System". ...
    (microsoft.public.windows.server.scripting)