Q

Restricting users without affecting admin privileges

I have a standalone PC with Windows XP Professional. I want to create a few restricted users. For example, I'd like to leave out the desktop icons or the "run" function in the start menu. I have tried achieving this with GPEDIT.MSC, but if I set it under user configuration, I also get it for the administrator account. How can I log on as an administrator and restrict users for certain parts but not be restricted myself? In NT 4.0 it was easy with the policy editor: you only had to add a user (wich I cannot find in the GPEDIT.MSC) and restrict that user from whatever you want.
You should avoid using GPEDIT.MSC on local machines. You have the least amount of control. Instead, you should set up domain-level or OU-level GPOs that affect your users or computers. You can use Group Policy filtering (via user groups) to hone which specific users or computers will be affected. You can remove Administrators from the processing in this fashion.
This was first published in December 2003

Dig deeper on Microsoft Group Policy Management

Pro+

Features

Enjoy the benefits of Pro+ membership, learn more and join.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

SearchServerVirtualization

SearchCloudComputing

SearchExchange

SearchSQLServer

SearchWinIT

SearchEnterpriseDesktop

SearchVirtualDesktop

Close