Mr.Guvernment 0 Posted March 17, 2003 I am trying to lock down a computer here @ work. - i am using the gpedit.msc to do most of it, how ever any changes made affects ALL accounts, not specifics. So 2 questions really 1. Can i use gpedit.msc to lock down specific accounts on this system running XP - there are 3 account - 1 Admin, and 2 guest accounts i want to severly limit access to, but not hider the admin account. 2. If i hide the run command but not allow the "run" window to appear in the START area - how can i access it incase i need to make changes? Thnx. Share this post Link to post
DS3Circuit 0 Posted March 17, 2003 1. http://www.jsiinc.com/SUBL/tip5600/rh5619.htm http://support.microsoft.com/default.aspx?scid=kb;en-us;q293655 http://www.jsiinc.com/sube/tip2400/rh2492.htm In other words, manipulate the ACE on the ACL with the users who need to have the policy applied to them. An AD environment would use the same technique. 2. Login as a user with those privileges HTH Share this post Link to post
Mr.Guvernment 0 Posted March 17, 2003 sweet!m8, thnx for the links! reading away! Share this post Link to post
mezron 0 Posted March 17, 2003 Quote: 2. If i hide the run command but not allow the "run" window to appear in the START area - how can i access it incase i need to make changes? when you do a ctrl+alt+del to bring up the task manager if you click "file" you get a run box. You might want to hide that as well. I don't know if the stuff DS3Circuit told you about would hide that one. It might... I genuinely don't know. Jim Share this post Link to post
Hood 0 Posted March 17, 2003 Hi, You could try adding the Guest Accounts' User name into the policy that you wish to edit. That way restricting specific users and not the all guest. Using the 'Windows Key' + 'R' will bring up the RUN command, but I'm not sure if this will work once you disable it. Share this post Link to post