Can I apply group policies by user?

[bintheninth]

Hi all,

I am looking for a way to lock down my kids pc and the things I would like to do is remove certain things, like the run command, my computer, control panel, etc.

I have been trying to use gpedit.msc and I see tons of options, but what puzzles me is none of it seems to be user/group based. If I make a change in gpedit.msc, say remove "run" from the start menu, it affects ALL users (even administrator).

This is a WinXP Pro system on a home network, no domain set up.

Is there a piece to this puzzle I am missing that will allow me to assign these polices to a particular user and/or group?

TIA,

[D.Celt]

I don't think it's possible to apply policy per user, but you can set up the kids user account as limited. Also ntfs permissions can be set to restrict access to files & folders.

Btw

[prathapml]

Can I apply group policies by user?

Yes, its possible.

You need to use the H_KEY_CURRENT_USER in registry for the same entries instead of H_KEY_LOCAL MACHINE.

Look here for details - link.

Do post back if you have any clarifications to be made!

Oh, and welcome to MSFN forums!

[FAT64]

Check out some software called "Advanced Security Administrator", this will do exactly what you are looking for a very reasonable price.

http://www.softheap.com/asecagent.html

[bintheninth]

I don't think it's possible to apply policy per user, but you can set up the kids user account as limited. Also ntfs permissions can be set to restrict access to files & folders.

Btw

Thanks for the info.

I have tried setting up the limited accounts, and found it to be...very limiting

I.e., a lot of programs just refuse to run and pop up dialogs about not being able to write to certain files. About the NTFS permissions...this one also has me boggled:

Neither of my XP systems at home has ANY security options. I am using XP pro, NTFS and when I right click a folder, all I see is:

General

Sharing

Customize

The "sharing" tab only has "Local sharing and Security" and "Network sharing and Security". Neither of these gives me user/group attributes like I expect. All I can do is open up file/printer sharing or share a folder on the network. Neither of these is what I am expecting to see...

To contrast, my system at work has these tabs:

General

Sharing

Security

Customize

And I can give/deny rights to users and groups.

Am I missing some component or setting to allow me to set up security by folder?

TIA,

[prathapml]

Am I missing some component or setting to allow me to set up  security by folder?

1. open My Computer

2. Tools >> Folder Options

3. Click the "View" tab.

4. Scroll down to find the checkbox saying "Use simple file-sharing".

5. Remove the check from there and apply the setting.

Now you will find the Security tab available.

[bintheninth]

Am I missing some component or setting to allow me to set up  security by folder?

1. open My Computer

2. Tools >> Folder Options

3. Click the "View" tab.

4. Scroll down to find the checkbox saying "Use simple file-sharing".

5. Remove the check from there and apply the setting.

Now you will find the Security tab available.

DOH!

Thanks for that, I was looking everywhere! I was beggining to wonder if I had lost my mind.

I wonder how many other things are "simple" by default

Can't Bill just leave me alone and let me build my systems the way I want...?!?!

Thanks again...thats one down, one to go. I am looking at the link mentioned above about user level policies, still not real sure where to go with it but at least its a start.

[Spyder2k]

I believe this may be what you're looking for.