Group Policy mmc question

[erikhertzel]

All,

I am trying to lock some W2k Pro machines down in a workgroup (not too many of them maybe 10 or so) and it's not a in a Windows Domain, just workgroup.

I like the MMC Snap-in Group Policy and then disable stuff like 'My Network Places', etc....

However, this seems to apply to the entire PC rather than just the user that I want it to apply to. How can I have like an admin account with full priv. and then have an account with the policies set up with so I can switch back and forth easily?

Thanks,

Erik

 

[Drakujii]

By default, policies apply in the HKLM in the registry, If you want to force them for only one user on a station, you will have to put the key in the HKCU of the account you want to be blocked.

It's the same keys with the same value for both place (HKLM and HKCU)

Fred

Fred

You have only one life, enjoy it !!!

 

[monsterjta]

Group Policy is intended to be used with Active Directory and, more specifically, Domains. I don't understand how Group Policy can even be pushed out to ANY workstation that is not a part of a domain, with the fact that it needs to be pushed out via a DC. It sounds to me like you are editing the Local Security Policy, which will affect the machine.

Essentially, if you would like to use Group Policy and have it affect users, groups, and machines...then you will need to have a domain.