• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 300
  • Last Modified:

Group Policy For Windows XP Tablet

I have a tablet pc that I need to lock down a single user. I know how make the changes, however I can't get it set to lock down just one user.

Is it possible to do with the machine not being on a domain? Domain is out of the question.

Thanks.
0
rccbi
Asked:
rccbi
  • 6
  • 4
1 Solution
 
raminhosCommented:
If you create a group with the policies u want and assign the user to that group ?
0
 
rccbiAuthor Commented:
I guess I don't know what you mean. Thats what I am kind of asking. How do I do that?
0
 
rccbiAuthor Commented:
Does anybody else have any suggestions?

Is this something that can even be done?
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
grayeCommented:
Tell us more about what you mean by "lock down to a single user"...   Do you mean that you'd like only one person to be able to login to the tablet?   Or do you mean that you'd like to severly restrict what one person can do on that tablet (but allow other users to have full access)?
0
 
rccbiAuthor Commented:
There are 2 users on the machine.
One needs to have full access, incase something goes wrong with the machine. The other account needs to be severly restricted.

I know what needs to be restricted I just don't know how to do that without restricting both accounts.
0
 
grayeCommented:
So, don't hold back... :)   tell us the types of things that you want to restrict for that one user.   This will help us formulate a proper solution
0
 
rccbiAuthor Commented:
I just need to know if its possible to create a GPO for a user on a computer that is not on a domain.

I know it can be done on a domain with ease.

If it can be done, do you know how to do it?
0
 
grayeCommented:
No,  you cannot use a GPO without a domain...   However, there are ways to accomplish almost the same thing "by hand" via the Local Security Policy.
You'd typically lauch the Local Security Policy Editor via the "secpol.msc" at the Run command.
http://technet.microsoft.com/en-us/library/cc739442.aspx 
0
 
rccbiAuthor Commented:
Isn't secpol.msc the same part of gpedit.msc as the User Configuration?

The problem I ran into was when I made changes to the user Configuration under gpedit.msc it made the same changes for the Administrator account.
0
 
grayeCommented:
There really isn't a "user portion" of the Local Security Policy... it's all machine-based.   The User Rights Assignments section is where you'd typically perform operations to lockdown what things your "restricted user" can and can not do.   But again, without much detail, we can really tell if that's sufficient for your needs.
You might be able to do whatever-it-is-you-want-to-do with the Microsoft Shared Computer Toolkit for Windows XP and SteadState
 
     http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx
0
 
rccbiAuthor Commented:
I needed to do stuff like remove everything but 1 program from the start menu. Keep the log out button.

Needed to turn off access to install programs, no access to make changes to the desktop the task bar.. Hide icons on desktop.. tray icons. Turn off ctrl alt delete, control panel, run command...

I got it all figured out though, thanks.
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

  • 6
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now