Group Policy

I need some elucidation concerning user restriction.

I have been trying to assign restriction for a sparticular user within users
group (member of users) without applyint them to my account as a memeber of
administrators.

Trying to perform that in Group Policy setting window - User Configuration -
Administrative Templates the result is applied to my account (member of
administators).

Is there any way of make restriction assigned to a users group or a single
user. Or the only way to do it is 'limit account' setting for a specified
user?

Thank you in advance for any suggestion.

AC
Windows XP Pro SP2

You might want to take a look here:

http://support.microsoft.com/default...b;en-us;293655

It will apply to XP as well as Win2K.

--
Nepatsfan
"AC" <krygaart@hotmail.com> wrote in message
news:Oj$DxLb%23EHA.2700@TK2MSFTNGP14.phx.gbl...

>I need some elucidation concerning user restriction.
>
> I have been trying to assign restriction for a sparticular user
> within users
> group (member of users) without applyint them to my account as
> a memeber of
> administrators.
>
> Trying to perform that in Group Policy setting window - User
> Configuration -
> Administrative Templates the result is applied to my account
> (member of
> administators).
>
> Is there any way of make restriction assigned to a users group
> or a single
> user. Or the only way to do it is 'limit account' setting for a
> specified
> user?
>
> Thank you in advance for any suggestion.
>
> AC
> Windows XP Pro SP2
>
>
>

Thanks, but I know this article.

I would like to know WHY it does not work <naturally> in my case.

I am using McAfee Internet Security on Win Xp Pro Sp2... I have really no
idea.

Have you?


"Nepatsfan" <nepatsfan@SBXXXVIII.com> wrote in message
news:K9SdnZWKlpO3mHrcRVn-iA@comcast.com...

> You might want to take a look here:
>
> http://support.microsoft.com/default...b;en-us;293655
>
> It will apply to XP as well as Win2K.
>
> --
> Nepatsfan
> "AC" <krygaart@hotmail.com> wrote in message
> news:Oj$DxLb%23EHA.2700@TK2MSFTNGP14.phx.gbl...

>
>

I'm not sure I understand exactly what it is you're asking.

Did you follow the procedure outlined in the article?
What were the results? Were there still settings applied to
administrative accounts?

If you're wondering why the settings get applied to all accounts
by default then you need to consider the difference between a
workgroup and a domain. In a workgroup, Local Group Policy is
initially applied to all accounts.



--
Nepatsfan
"AC" <krygaart@hotmail.com> wrote in message
news:O4bGzgf%23EHA.3376@TK2MSFTNGP12.phx.gbl...

> Thanks, but I know this article.
>
> I would like to know WHY it does not work <naturally> in my
> case.
>
> I am using McAfee Internet Security on Win Xp Pro Sp2... I have
> really no idea.
>
> Have you?
>
>
> "Nepatsfan" <nepatsfan@SBXXXVIII.com> wrote in message
> news:K9SdnZWKlpO3mHrcRVn-iA@comcast.com...

>
>

Because you didn't pay for server.

--
----------------------------------------------------------
http://www.uscricket.com
"AC" <krygaart@hotmail.com> wrote in message news:O4bGzgf%23EHA.3376@TK2MSFTNGP12.phx.gbl...

> Thanks, but I know this article.
>
> I would like to know WHY it does not work <naturally> in my case.
>
> I am using McAfee Internet Security on Win Xp Pro Sp2... I have really no
> idea.
>
> Have you?
>
>
> "Nepatsfan" <nepatsfan@SBXXXVIII.com> wrote in message
> news:K9SdnZWKlpO3mHrcRVn-iA@comcast.com...

>
>

???? Really


"David Candy" <.> wrote in message
news:uMAMeAl%23EHA.4092@TK2MSFTNGP09.phx.gbl...
Because you didn't pay for server.

--
----------------------------------------------------------
http://www.uscricket.com
"AC" <krygaart@hotmail.com> wrote in message
news:O4bGzgf%23EHA.3376@TK2MSFTNGP12.phx.gbl...

> Thanks, but I know this article.
>
> I would like to know WHY it does not work <naturally> in my case.
>
> I am using McAfee Internet Security on Win Xp Pro Sp2... I have really no
> idea.
>
> Have you?
>
>
> "Nepatsfan" <nepatsfan@SBXXXVIII.com> wrote in message
> news:K9SdnZWKlpO3mHrcRVn-iA@comcast.com...

>
>

To all account means a mine? - ie user from administrators account?

I have one single post with Win XP pro SP2. I would like to limit my wife to
install the software.

I am a user with administrator privileges and her is an user from user
group.

I am certain that the procedure will work (replacing the reg file is always
miraculous) but I wonder why it does NOT work in the ordinary way?

Thanks for your time.


"Nepatsfan" <nepatsfan@SBXXXVIII.com> wrote in message
news:mvidncMkKcFYe3rcRVn-1w@comcast.com...

> I'm not sure I understand exactly what it is you're asking.
>
> Did you follow the procedure outlined in the article?
> What were the results? Were there still settings applied to administrative
> accounts?
>
> If you're wondering why the settings get applied to all accounts by
> default then you need to consider the difference between a workgroup and a
> domain. In a workgroup, Local Group Policy is initially applied to all
> accounts.
>
>
>
> --
> Nepatsfan
> "AC" <krygaart@hotmail.com> wrote in message
> news:O4bGzgf%23EHA.3376@TK2MSFTNGP12.phx.gbl...

>
>

Yes, really.

--
----------------------------------------------------------
http://www.uscricket.com
"AC" <krygaart@hotmail.com> wrote in message news:%23ivNUkr%23EHA.2540@TK2MSFTNGP09.phx.gbl...

> ???? Really
>
>
> "David Candy" <.> wrote in message
> news:uMAMeAl%23EHA.4092@TK2MSFTNGP09.phx.gbl...
> Because you didn't pay for server.
>
> --
> ----------------------------------------------------------
> http://www.uscricket.com
> "AC" <krygaart@hotmail.com> wrote in message
> news:O4bGzgf%23EHA.3376@TK2MSFTNGP12.phx.gbl...

>
>

First off, if you want to prevent your wife from installing
software then leave her account as a member of the users group.
If you want to allow here to install software but not have full
administrative privileges then make her a member of the power
users group.

I'll have to admit, I really don't know why Microsoft decided to
set up Local Group Policy so that you can't apply individual
settings to different users and groups. My best guess is that, as
I mentioned before, it has to do with the basic difference
between a workgroup and a domain.

In a workgroup, each PC has it own collection of users and it's
own set of policies. If your the person in charge of overseeing
the day to day operation of these machines, how do you keep track
of who can do what on which machine? In a workgroup, simpler is
better. Start making things complicated and it becomes
unmanageable. Putting users in different groups (users, power
users, administrators, etc.) allows you to put some restrictions
on their activities. You also have some settings that can be set
for users and groups within the following section of Local Group
Policy:
Computer Configuration\Windows Settings\Security Settings\Local
Policies\User Rights Assignment

Since a domain provides a point of centralized administration, a
domain controller, it's much easier to implement policies that
determine, as I put it earlier, who can do what on which machine.

As for your options, you might find this program useful:

http://www.dougknox.com/xp/utils/xp_securityconsole.htm

I haven't used this program but I've seen it recommended on these
newsgroups by people whose opinions I respect.

Good luck.
--
Nepatsfan
"AC" <krygaart@hotmail.com> wrote in message
news:u4odAor%23EHA.4072@TK2MSFTNGP10.phx.gbl...

> To all account means a mine? - ie user from administrators
> account?
>
> I have one single post with Win XP pro SP2. I would like to
> limit my wife to install the software.
>
> I am a user with administrator privileges and her is an user
> from user group.
>
> I am certain that the procedure will work (replacing the reg
> file is always miraculous) but I wonder why it does NOT work in
> the ordinary way?
>
> Thanks for your time.
>
>
> "Nepatsfan" <nepatsfan@SBXXXVIII.com> wrote in message
> news:mvidncMkKcFYe3rcRVn-1w@comcast.com...

>
>

Would you be so kind to unfold your thread?

"David Candy" <.> wrote in message
news:upZ2wKy%23EHA.2192@TK2MSFTNGP14.phx.gbl...
Yes, really.

--
----------------------------------------------------------
http://www.uscricket.com
"AC" <krygaart@hotmail.com> wrote in message
news:%23ivNUkr%23EHA.2540@TK2MSFTNGP09.phx.gbl...

> ???? Really
>
>
> "David Candy" <.> wrote in message
> news:uMAMeAl%23EHA.4092@TK2MSFTNGP09.phx.gbl...
> Because you didn't pay for server.
>
> --
> ----------------------------------------------------------
> http://www.uscricket.com
> "AC" <krygaart@hotmail.com> wrote in message
> news:O4bGzgf%23EHA.3376@TK2MSFTNGP12.phx.gbl...

>
>