Solved

Group Policy For Windows XP Tablet

Posted on 2008-10-24
11
292 Views
Last Modified: 2013-11-29
I have a tablet pc that I need to lock down a single user. I know how make the changes, however I can't get it set to lock down just one user.

Is it possible to do with the machine not being on a domain? Domain is out of the question.

Thanks.
0
Comment
Question by:rccbi
  • 6
  • 4
11 Comments
 
LVL 3

Expert Comment

by:raminhos
Comment Utility
If you create a group with the policies u want and assign the user to that group ?
0
 
LVL 1

Author Comment

by:rccbi
Comment Utility
I guess I don't know what you mean. Thats what I am kind of asking. How do I do that?
0
 
LVL 1

Author Comment

by:rccbi
Comment Utility
Does anybody else have any suggestions?

Is this something that can even be done?
0
 
LVL 41

Expert Comment

by:graye
Comment Utility
Tell us more about what you mean by "lock down to a single user"...   Do you mean that you'd like only one person to be able to login to the tablet?   Or do you mean that you'd like to severly restrict what one person can do on that tablet (but allow other users to have full access)?
0
 
LVL 1

Author Comment

by:rccbi
Comment Utility
There are 2 users on the machine.
One needs to have full access, incase something goes wrong with the machine. The other account needs to be severly restricted.

I know what needs to be restricted I just don't know how to do that without restricting both accounts.
0
Integrate social media with email signatures

Is your company active on social media? Do you also use email signatures? Including social media icons in your email signature is a great way to get fans for free. Let all your email users know you’re on social media quickly and easily, in a single click.

 
LVL 41

Expert Comment

by:graye
Comment Utility
So, don't hold back... :)   tell us the types of things that you want to restrict for that one user.   This will help us formulate a proper solution
0
 
LVL 1

Author Comment

by:rccbi
Comment Utility
I just need to know if its possible to create a GPO for a user on a computer that is not on a domain.

I know it can be done on a domain with ease.

If it can be done, do you know how to do it?
0
 
LVL 41

Expert Comment

by:graye
Comment Utility
No,  you cannot use a GPO without a domain...   However, there are ways to accomplish almost the same thing "by hand" via the Local Security Policy.
You'd typically lauch the Local Security Policy Editor via the "secpol.msc" at the Run command.
http://technet.microsoft.com/en-us/library/cc739442.aspx
0
 
LVL 1

Author Comment

by:rccbi
Comment Utility
Isn't secpol.msc the same part of gpedit.msc as the User Configuration?

The problem I ran into was when I made changes to the user Configuration under gpedit.msc it made the same changes for the Administrator account.
0
 
LVL 41

Expert Comment

by:graye
Comment Utility
There really isn't a "user portion" of the Local Security Policy... it's all machine-based.   The User Rights Assignments section is where you'd typically perform operations to lockdown what things your "restricted user" can and can not do.   But again, without much detail, we can really tell if that's sufficient for your needs.
You might be able to do whatever-it-is-you-want-to-do with the Microsoft Shared Computer Toolkit for Windows XP and SteadState
 
     http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx
0
 
LVL 1

Accepted Solution

by:
rccbi earned 0 total points
Comment Utility
I needed to do stuff like remove everything but 1 program from the start menu. Keep the log out button.

Needed to turn off access to install programs, no access to make changes to the desktop the task bar.. Hide icons on desktop.. tray icons. Turn off ctrl alt delete, control panel, run command...

I got it all figured out though, thanks.
0

Featured Post

Too many email signature updates to deal with?

Do you feel like you are taking up all of your time constantly visiting users’ desks to make changes to email signatures? Wish you could manage all signatures from one central location, easily design them and deploy them quickly to users? Well, there is an easy way!

Join & Write a Comment

Several part series to implement Internet Explorer 11 Enterprise Mode
The use of stolen credentials is a hot commodity this year allowing threat actors to move laterally within the network in order to avoid breach detection.
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now