Creating customized shells for users

[Sidrp]

Hi Windows XP gurus..
This question comes after my fgutile efforts to find a solution on my own.. hope some of you can help.
We are developing windows xp (embedded) images for the thin client in my company. win xpe is same as win xp pro except you can decide wht you want to put and what not.

Now my question is, how does one go about creatig two different looking shells, a user account with strict security settings like no right click, no access to windows explorer, limited control panel icons etc. and on the other hand create an administrtor account with all permissions.

We currenltly use GPEDIT to modify the setings but it seem to change the settings system wide. Is there a way we can avoid this? I dont know how many of the admins over there have experienced a similar problem, i am sure i am not the first. so pl. help me find a solution

any tips and pointers wil be appriciated.
thank you
sid

 

[bcastner]

You might try the "Anyone but the Administrator" trick for Group Policy. I had a good article but the link has expired, so you will have to settle for my explanation of how to do this: thread616-654296

 

[Sidrp]

Thanks Buddy..
well it made some sense to me..I tried doing the MS thingy but it didnot work as said by the other user. I wonder why..anyway..can you please elaborate the process a little more..like when do i set the persmissions using gpedit ? before or after setting the directory permissions??let me know and thanks again
sid

 

[bcastner]

Set up everything in Group Policy that you want set, then remove from the Directory the permissions for Administrator to c:\windows\system32\GroupPolicy.

To later edit Group Policy, remember to reverse this temporarily.

 

[Sidrp]

Hi..
well no luck..I set up the system with a classic start bar and no help on start menu as a test. I went into the folder and took out Administrator completely. Still no luck. Do i have to set up the user account while logged in as the user?
Let me know
thanks
sid

 

[bcastner]

You are not using Group Policy to achieve the Classic View. You can configure outside of Group Policy various desktop settings, and force those for non-Administrator users.

How to Create a Custom Default User Profile

http://support.microsoft.com/defaul...port/kb/articles/q305/7/09.asp&NoWebContent=1

How to Assign a Mandatory User Profile

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q307800&sd=tech

 

[Sidrp]

Hi..
well the example i gave was just a test..I mean i am using GPEDIT to do a lot of other things like disable right mouse click, prevent access to control panel etc..currently i am using GPEDIT to customise the features for user, but the changes are system wide and hence i want a all access profile for admin and a restricted access profile for user and hence the post. Your tips have helped me immensely to explore certain hidden features and I need to get a stronger hold on the profiles i create and send out
let me know if this helps u in understanding wht i need
thanks
Sid