By submitting your personal information, you agree that TechTarget and its partners may contact you regarding relevant content, products and special offers.
I have a standalone PC with Windows XP Professional. I want to create a few restricted users. For example, I'd like to leave out the desktop icons or the "run" function in the start menu. I have tried achieving this with GPEDIT.MSC, but if I set it under user configuration, I also get it for the administrator account. How can I log on as an administrator and restrict users for certain parts but not be restricted myself? In NT 4.0 it was easy with the policy editor: you only had to add a user (wich I cannot find in the GPEDIT.MSC) and restrict that user from whatever you want.
You should avoid using GPEDIT.MSC on local machines. You have the least amount of control. Instead, you should set up domain-level or OU-level GPOs that affect your users or computers. You can use Group Policy filtering (via user groups) to hone which specific users or computers will be affected. You can remove Administrators from the processing in this fashion.