Ask the Expert

Restricting users without affecting admin privileges

I have a standalone PC with Windows XP Professional. I want to create a few restricted users. For example, I'd like to leave out the desktop icons or the "run" function in the start menu. I have tried achieving this with GPEDIT.MSC, but if I set it under user configuration, I also get it for the administrator account. How can I log on as an administrator and restrict users for certain parts but not be restricted myself? In NT 4.0 it was easy with the policy editor: you only had to add a user (wich I cannot find in the GPEDIT.MSC) and restrict that user from whatever you want.

    Requires Free Membership to View

You should avoid using GPEDIT.MSC on local machines. You have the least amount of control. Instead, you should set up domain-level or OU-level GPOs that affect your users or computers. You can use Group Policy filtering (via user groups) to hone which specific users or computers will be affected. You can remove Administrators from the processing in this fashion.

This was first published in December 2003

There are Comments. Add yours.

TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: