Solved

Group Policy For Windows XP Tablet

Posted on 2008-10-24
11
298 Views
Last Modified: 2013-11-29
I have a tablet pc that I need to lock down a single user. I know how make the changes, however I can't get it set to lock down just one user.

Is it possible to do with the machine not being on a domain? Domain is out of the question.

Thanks.
0
Comment
Question by:rccbi
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 4
11 Comments
 
LVL 3

Expert Comment

by:raminhos
ID: 22799423
If you create a group with the policies u want and assign the user to that group ?
0
 
LVL 1

Author Comment

by:rccbi
ID: 22799770
I guess I don't know what you mean. Thats what I am kind of asking. How do I do that?
0
 
LVL 1

Author Comment

by:rccbi
ID: 22813517
Does anybody else have any suggestions?

Is this something that can even be done?
0
Secure Your WordPress Site: 5 Essential Approaches

WordPress is the web's most popular CMS, but its dominance also makes it a target for attackers. Our eBook will show you how to:

Prevent costly exploits of core and plugin vulnerabilities
Repel automated attacks
Lock down your dashboard, secure your code, and protect your users

 
LVL 41

Expert Comment

by:graye
ID: 22816713
Tell us more about what you mean by "lock down to a single user"...   Do you mean that you'd like only one person to be able to login to the tablet?   Or do you mean that you'd like to severly restrict what one person can do on that tablet (but allow other users to have full access)?
0
 
LVL 1

Author Comment

by:rccbi
ID: 22817055
There are 2 users on the machine.
One needs to have full access, incase something goes wrong with the machine. The other account needs to be severly restricted.

I know what needs to be restricted I just don't know how to do that without restricting both accounts.
0
 
LVL 41

Expert Comment

by:graye
ID: 22817815
So, don't hold back... :)   tell us the types of things that you want to restrict for that one user.   This will help us formulate a proper solution
0
 
LVL 1

Author Comment

by:rccbi
ID: 22821851
I just need to know if its possible to create a GPO for a user on a computer that is not on a domain.

I know it can be done on a domain with ease.

If it can be done, do you know how to do it?
0
 
LVL 41

Expert Comment

by:graye
ID: 22824917
No,  you cannot use a GPO without a domain...   However, there are ways to accomplish almost the same thing "by hand" via the Local Security Policy.
You'd typically lauch the Local Security Policy Editor via the "secpol.msc" at the Run command.
http://technet.microsoft.com/en-us/library/cc739442.aspx 
0
 
LVL 1

Author Comment

by:rccbi
ID: 22825005
Isn't secpol.msc the same part of gpedit.msc as the User Configuration?

The problem I ran into was when I made changes to the user Configuration under gpedit.msc it made the same changes for the Administrator account.
0
 
LVL 41

Expert Comment

by:graye
ID: 22826927
There really isn't a "user portion" of the Local Security Policy... it's all machine-based.   The User Rights Assignments section is where you'd typically perform operations to lockdown what things your "restricted user" can and can not do.   But again, without much detail, we can really tell if that's sufficient for your needs.
You might be able to do whatever-it-is-you-want-to-do with the Microsoft Shared Computer Toolkit for Windows XP and SteadState
 
     http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx
0
 
LVL 1

Accepted Solution

by:
rccbi earned 0 total points
ID: 22830732
I needed to do stuff like remove everything but 1 program from the start menu. Keep the log out button.

Needed to turn off access to install programs, no access to make changes to the desktop the task bar.. Hide icons on desktop.. tray icons. Turn off ctrl alt delete, control panel, run command...

I got it all figured out though, thanks.
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article summaries thoughts and ideas from two years of sustained use. It provides good reasoning to make the jump to Windows 10.
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question