Group Policy for computer not in domain...

[shadowman1]

Hi All,

I have something I'm trying to do, that doesn't work so well.

I have a server 2003 computer that does not connected to the domain, I have the normal administrator user and another user I created a user called visitor

I added visitor to "Remote Desktop users" groups on the computer. and I can connect to the server using the username.

What i'm trying to do is that when the user visitor connect to the server using RDP with username visitor

he will have a desktop with internet explorer without any access to modify settings, my computer with access only to my documents, and start menu with only log off (no shutdown or control panel)

How do I do it?

Thanks.

[Idontwantspam]

Well, you could I suppose do some of things through group policy. What I would do is use registry-based policy for that individual user.

[cluberti]

You can modify most settings available in a Group Policy locally on the server by running gpedit.msc. There are quite a few settings that require a domain, but I think most of what you want to do can be found in the local policy on the server under the User configuration.