itachis.eyes Posted August 25, 2009 Share Posted August 25, 2009 ok so i opened up "gpedit.msc" and started editing under "user configuration" but its adding the changes to my administrator account....how can i just lock down the user accounts and leave my admin account open to do whatever i need?the reason i'm doing this is we're setting up a computer for my little brother (he is the super computer illiterate type that just clicks everything) but anyway he is having a user account but, in the user account you can still access cmd.exe and all that good stuff i just want to make it so he has a bare bones account that can only run the software i install and can't change any settings Link to comment Share on other sites More sharing options...
cluberti Posted August 26, 2009 Share Posted August 26, 2009 Local Group Policy isn't that granular - if you apply a user policy, it's going to apply any and all settings under "User Configuration" to all users. You can configure some security settings under the Computer Configuration > Windows Settings > Security Settings and it's subtrees, but most of those are account and login policies, rather than the things you're probably after under User Configuration (my guess).Since you posted this under XP, consider instead using Windows SteadyState to keep him from harming the PC, rather than trying to do it via policy. Link to comment Share on other sites More sharing options...
itachis.eyes Posted August 26, 2009 Author Share Posted August 26, 2009 Local Group Policy isn't that granular - if you apply a user policy, it's going to apply any and all settings under "User Configuration" to all users. You can configure some security settings under the Computer Configuration > Windows Settings > Security Settings and it's subtrees, but most of those are account and login policies, rather than the things you're probably after under User Configuration (my guess).Since you posted this under XP, consider instead using Windows SteadyState to keep him from harming the PC, rather than trying to do it via policy.thanks. looks good, i'll try it out.but that sparks a question...so then since policy effects all computers on the network, is this how system admins restrict things, like at my high school anyone with a user account can't to anything, not even open up command prompt, but the administrator/tech guy has an admin account with full rights and power. does he do that with a program like this or with registry editing? Link to comment Share on other sites More sharing options...
IcemanND Posted August 26, 2009 Share Posted August 26, 2009 local group policies are different from the domain group policies they use at your school, you can get a bit more granular with domain policies. And there are other things you can do to lock down systems on a domain. Link to comment Share on other sites More sharing options...
itachis.eyes Posted August 26, 2009 Author Share Posted August 26, 2009 local group policies are different from the domain group policies they use at your school, you can get a bit more granular with domain policies. And there are other things you can do to lock down systems on a domain.awesome, thanks for enlightening me, i like to think i know a good deal about computers (at least for a kid who hasn't really taken any computer science classes at any level) but when it comes to the registry i feel like a little kid XD but really its useful stuff, at least until i learn how to use it i can appreciate its power within the computer/network Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now