Some gpedit help please

Soldato
Joined
18 Oct 2002
Posts
15,713
Location
North Wales
I'm trying to setup some user profiles so they have some restricted access.

I'm looking through the options in the gpedit.msc, but I'm not really sure what I'm doing.

Basically, I want 1 or 2 computer admins that have full access to everything. And then a couple of limited accounts with some custom settings.

A normal limited account isn't sufficient as it allows creating desktop items, moving and changing files etc. I can find these settings in the gpedit admin templates, but I'm not sure on how to enforce them for specific users?

Secondly, when using a limited account, I've had problems in the past with some applications and games needing an admin account to run them as they alter some files or registry entries, so I want to get around this also.


Can anyone offer some help?


Cheers
 
Seems to me you need an Admin account with the restrictions of a user account to a degree.

Not my area, but i can't think it would be possible, not without a lot of editing anyway.

Maybe you could list specific 'haves' and 'dont haves' for the user and someone could point out how to change those specifically.
 
All I want them to be able to to is not install or uninstall anything. As well as not be able to add or remove shortcuts from the desktop, or start menu. And disable most of the control panel options except screen saver and desktop background.


Doesn't sound a lot, but seems a PITA (to me anyway) to get.
 
Back
Top Bottom