Solved

Group Policy For Windows XP Tablet

Posted on 2008-10-24
11
295 Views
Last Modified: 2013-11-29
I have a tablet pc that I need to lock down a single user. I know how make the changes, however I can't get it set to lock down just one user.

Is it possible to do with the machine not being on a domain? Domain is out of the question.

Thanks.
0
Comment
Question by:rccbi
  • 6
  • 4
11 Comments
 
LVL 3

Expert Comment

by:raminhos
ID: 22799423
If you create a group with the policies u want and assign the user to that group ?
0
 
LVL 1

Author Comment

by:rccbi
ID: 22799770
I guess I don't know what you mean. Thats what I am kind of asking. How do I do that?
0
 
LVL 1

Author Comment

by:rccbi
ID: 22813517
Does anybody else have any suggestions?

Is this something that can even be done?
0
Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

 
LVL 41

Expert Comment

by:graye
ID: 22816713
Tell us more about what you mean by "lock down to a single user"...   Do you mean that you'd like only one person to be able to login to the tablet?   Or do you mean that you'd like to severly restrict what one person can do on that tablet (but allow other users to have full access)?
0
 
LVL 1

Author Comment

by:rccbi
ID: 22817055
There are 2 users on the machine.
One needs to have full access, incase something goes wrong with the machine. The other account needs to be severly restricted.

I know what needs to be restricted I just don't know how to do that without restricting both accounts.
0
 
LVL 41

Expert Comment

by:graye
ID: 22817815
So, don't hold back... :)   tell us the types of things that you want to restrict for that one user.   This will help us formulate a proper solution
0
 
LVL 1

Author Comment

by:rccbi
ID: 22821851
I just need to know if its possible to create a GPO for a user on a computer that is not on a domain.

I know it can be done on a domain with ease.

If it can be done, do you know how to do it?
0
 
LVL 41

Expert Comment

by:graye
ID: 22824917
No,  you cannot use a GPO without a domain...   However, there are ways to accomplish almost the same thing "by hand" via the Local Security Policy.
You'd typically lauch the Local Security Policy Editor via the "secpol.msc" at the Run command.
http://technet.microsoft.com/en-us/library/cc739442.aspx 
0
 
LVL 1

Author Comment

by:rccbi
ID: 22825005
Isn't secpol.msc the same part of gpedit.msc as the User Configuration?

The problem I ran into was when I made changes to the user Configuration under gpedit.msc it made the same changes for the Administrator account.
0
 
LVL 41

Expert Comment

by:graye
ID: 22826927
There really isn't a "user portion" of the Local Security Policy... it's all machine-based.   The User Rights Assignments section is where you'd typically perform operations to lockdown what things your "restricted user" can and can not do.   But again, without much detail, we can really tell if that's sufficient for your needs.
You might be able to do whatever-it-is-you-want-to-do with the Microsoft Shared Computer Toolkit for Windows XP and SteadState
 
     http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx
0
 
LVL 1

Accepted Solution

by:
rccbi earned 0 total points
ID: 22830732
I needed to do stuff like remove everything but 1 program from the start menu. Keep the log out button.

Needed to turn off access to install programs, no access to make changes to the desktop the task bar.. Hide icons on desktop.. tray icons. Turn off ctrl alt delete, control panel, run command...

I got it all figured out though, thanks.
0

Featured Post

Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you need to start windows update installation remotely or as a scheduled task you will find this very helpful.
In this article, I will show you HOW TO: Perform a Physical to Virtual (P2V) Conversion the easy way from a computer backup (image).
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question