Manage Learn to apply best practices and optimize your operations.

Restricting users without affecting admin privileges

I have a standalone PC with Windows XP Professional. I want to create a few restricted users. For example, I'd like to leave out the desktop icons or the "run" function in the start menu. I have tried achieving this with GPEDIT.MSC, but if I set it under user configuration, I also get it for the administrator account. How can I log on as an administrator and restrict users for certain parts but not be restricted myself? In NT 4.0 it was easy with the policy editor: you only had to add a user (wich I cannot find in the GPEDIT.MSC) and restrict that user from whatever you want.
You should avoid using GPEDIT.MSC on local machines. You have the least amount of control. Instead, you should set up domain-level or OU-level GPOs that affect your users or computers. You can use Group Policy filtering (via user groups) to hone which specific users or computers will be affected. You can remove Administrators from the processing in this fashion.

Dig Deeper on Windows systems and network management

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.