Ask the Expert

Local computer policy that applies to all except administrator

How can I set up a local computer policy in XP Pro that applies to all users except the administrator account? The computer is a laptop that is a member of a domain.

Requires Free Membership to View

Local Group Policy Objects (GPO) apply to all users who sign onto the computer. With that said, I have a nasty little trick you can use. The file %SYSTEMROOT%\system32\GroupPolicy\User\Registry.pol contains local user policy. Change permissions on this file to deny access by the local Administrators group, as shown in the figure below. Do this only after configuring local policies. If you need to edit the policies later, simply take ownership of the file by clicking Advanced and then clicking the Owner tab.


This was first published in July 2003

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: