?
Solved

Group Policy For Windows XP Tablet

Posted on 2008-10-24
11
Medium Priority
?
299 Views
Last Modified: 2013-11-29
I have a tablet pc that I need to lock down a single user. I know how make the changes, however I can't get it set to lock down just one user.

Is it possible to do with the machine not being on a domain? Domain is out of the question.

Thanks.
0
Comment
Question by:rccbi
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 4
11 Comments
 
LVL 3

Expert Comment

by:raminhos
ID: 22799423
If you create a group with the policies u want and assign the user to that group ?
0
 
LVL 1

Author Comment

by:rccbi
ID: 22799770
I guess I don't know what you mean. Thats what I am kind of asking. How do I do that?
0
 
LVL 1

Author Comment

by:rccbi
ID: 22813517
Does anybody else have any suggestions?

Is this something that can even be done?
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 41

Expert Comment

by:graye
ID: 22816713
Tell us more about what you mean by "lock down to a single user"...   Do you mean that you'd like only one person to be able to login to the tablet?   Or do you mean that you'd like to severly restrict what one person can do on that tablet (but allow other users to have full access)?
0
 
LVL 1

Author Comment

by:rccbi
ID: 22817055
There are 2 users on the machine.
One needs to have full access, incase something goes wrong with the machine. The other account needs to be severly restricted.

I know what needs to be restricted I just don't know how to do that without restricting both accounts.
0
 
LVL 41

Expert Comment

by:graye
ID: 22817815
So, don't hold back... :)   tell us the types of things that you want to restrict for that one user.   This will help us formulate a proper solution
0
 
LVL 1

Author Comment

by:rccbi
ID: 22821851
I just need to know if its possible to create a GPO for a user on a computer that is not on a domain.

I know it can be done on a domain with ease.

If it can be done, do you know how to do it?
0
 
LVL 41

Expert Comment

by:graye
ID: 22824917
No,  you cannot use a GPO without a domain...   However, there are ways to accomplish almost the same thing "by hand" via the Local Security Policy.
You'd typically lauch the Local Security Policy Editor via the "secpol.msc" at the Run command.
http://technet.microsoft.com/en-us/library/cc739442.aspx 
0
 
LVL 1

Author Comment

by:rccbi
ID: 22825005
Isn't secpol.msc the same part of gpedit.msc as the User Configuration?

The problem I ran into was when I made changes to the user Configuration under gpedit.msc it made the same changes for the Administrator account.
0
 
LVL 41

Expert Comment

by:graye
ID: 22826927
There really isn't a "user portion" of the Local Security Policy... it's all machine-based.   The User Rights Assignments section is where you'd typically perform operations to lockdown what things your "restricted user" can and can not do.   But again, without much detail, we can really tell if that's sufficient for your needs.
You might be able to do whatever-it-is-you-want-to-do with the Microsoft Shared Computer Toolkit for Windows XP and SteadState
 
     http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx
0
 
LVL 1

Accepted Solution

by:
rccbi earned 0 total points
ID: 22830732
I needed to do stuff like remove everything but 1 program from the start menu. Keep the log out button.

Needed to turn off access to install programs, no access to make changes to the desktop the task bar.. Hide icons on desktop.. tray icons. Turn off ctrl alt delete, control panel, run command...

I got it all figured out though, thanks.
0

Featured Post

Plug and play, no additional software required!

The ATEN UE3310 USB3.1 Gen1 Extender Cable allows users to extend the distance between the computer and USB devices up to 10 m (33 ft). The UE3310 is a high-quality, cost-effective solution for professional environments such as hospitals, factories and business facilities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The Windows functions GetTickCount and timeGetTime retrieve the number of milliseconds since the system was started. However, the value is stored in a DWORD, which means that it wraps around to zero every 49.7 days. This article shows how to solve t…
Determining the an SCCM package name from the Package ID
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question