Hey all. I have 2 accounts on Windows XP Pro SP1. Mine is Administrator and the other is users (basic account).

I have tried to use gpedit.msc to put some restrictions on the basic account however this has a global effect, the restrictions happen to the admin accout as well. In the forum i have read you need an active directory on a OS server.

I have a huge list of registery restrictions which can lock down a account on xp. the problem is have to make the basic account admin first so i can add the tweaks manually.

What i want doing is being able to add the registry restrictions from my admin accunt into the basic account...would i have to laod ntuser.dat for the basic account? how would i go about?

update: i have found out how to do it. !

And how did you do it?

Could you please take the time to describe the solution, since I was looking to do the same.

Removed

Wasim link below is better explanation

NOTES: You cannot load and change it while they logged on

this site explains how to do it, pretty basic once i found out :

http://www.dougknox.com/xp/tips/xp_adv_reg_editing.htm

hum, and what about windows 2000?

ok , I made a mistake! w2k works, I launched regedit and didn't found anything about hives.

Had to launch regedt32.exe. :-)

thx

I have some kiosk-type machines I want to lock down. Can you tell me what you did to lock down your basic account?

Thanks,

MtnWalker