• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

XP Pro: Group Policies on local machine...

M

metallibloke

Senior member
I want to do this on some machines that are going to go into a student computer room. I found the instructions on MS Technet on how to do it for Windows 2000, but not XP.

If I follow these instructions then it does the job until I want to change a policy and then it resets them all, which will be a pain the butt if it happens regularly.

I'm sure I read somewhere that you can only do it if you are on a domain and using Active Directory. Can anyone confirm this? (with links if possible, need to convince my boss!). I know it can be done through AD but is this the only way?

We already use group policy on all our machines, but only set stuff from a security standpoint so it doesnt matter if it applies to all accounts. What I want for these machines is to hide lots of stuff so the students cant mess around. The machines currently in use are NT4 and use mandatory profiles and group policies to affect only the one account. This is what I want but on XP Pro.

Any advice would be greatly appreciated!!
 
I'm not sure how the local security policy compares to the group policy but you might try clicking on start>run and typing secpol.msc

This will bring up the local policy editor (you can also find it in the administrative tools.)

Expand the Local Policies folder and then select the User rights assignment folder. There are several different options in there you can apply to different accounts. For example, there is an policy option call "access this computer from the network" and the default is set to Everyone, Administrators,Users, Power Users, Backup Operators. You could change this option to only allow the administrator to access the machine on the network.

I don't think it has as many options as the group policy editor in active directory but you might be able to do what you need to do with it.
 
Thanks for the reply, LatinJones!

Unfortunatley secpol isnt what I want, its only a subset of the policies you get in Group Policy, and doesnt allow you to specify which accounts the policies apply to.
 
You must log in or register to reply here.

TRENDING THREADS

Back
Top