I'm trying to setup some user profiles so they have some restricted access.
I'm looking through the options in the gpedit.msc, but I'm not really sure what I'm doing.
Basically, I want 1 or 2 computer admins that have full access to everything. And then a couple of limited accounts with some custom settings.
A normal limited account isn't sufficient as it allows creating desktop items, moving and changing files etc. I can find these settings in the gpedit admin templates, but I'm not sure on how to enforce them for specific users?
Secondly, when using a limited account, I've had problems in the past with some applications and games needing an admin account to run them as they alter some files or registry entries, so I want to get around this also.
Can anyone offer some help?
Cheers
I'm looking through the options in the gpedit.msc, but I'm not really sure what I'm doing.
Basically, I want 1 or 2 computer admins that have full access to everything. And then a couple of limited accounts with some custom settings.
A normal limited account isn't sufficient as it allows creating desktop items, moving and changing files etc. I can find these settings in the gpedit admin templates, but I'm not sure on how to enforce them for specific users?
Secondly, when using a limited account, I've had problems in the past with some applications and games needing an admin account to run them as they alter some files or registry entries, so I want to get around this also.
Can anyone offer some help?
Cheers