Restricting users without affecting admin privileges

I have a standalone PC with Windows XP Professional. I want to create a few restricted users. For example, I'd like to leave out the desktop icons or the "run" function in the start menu. I have tried achieving this with GPEDIT.MSC, but if I set it under user configuration, I also get it for the administrator account. How can I log on as an administrator and restrict users for certain parts but not be restricted myself? In NT 4.0 it was easy with the policy editor: you only had to add a user (wich I cannot find in the GPEDIT.MSC) and restrict that user from whatever you want.

    Requires Free Membership to View

    Login

You should avoid using GPEDIT.MSC on local machines. You have the least amount of control. Instead, you should set up domain-level or OU-level GPOs that affect your users or computers. You can use Group Policy filtering (via user groups) to hone which specific users or computers will be affected. You can remove Administrators from the processing in this fashion.

This was first published in December 2003

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.
    Back to top