+ Post New Thread
Results 1 to 9 of 9
Windows Thread, locking down specific user in Win XP in Technical; Hi all, Perhaps I am not using the correct words when I google this, but I can't find an answer, ...
  1. #1
    swpmre's Avatar
    Join Date
    Sep 2007
    Location
    Salford, Greater Manchester
    Posts
    72
    Thank Post
    14
    Thanked 3 Times in 2 Posts
    Rep Power
    18

    locking down specific user in Win XP

    Hi all,

    Perhaps I am not using the correct words when I google this, but I can't find an answer, so I'll try here!

    I'm trying to lock down a particular user on some Windows XP machines. We don't use Active Directory, so I can't do a Group Policy.

    I would like (for instance) to restrict access to various programmes, control panel etc, but only on one user account. I'd like all the others to remain the same.

    I've tried using gpedit.msc, but Group Policy Editor changes the settings for all users on the PC.

    Any other ideas?

    Martin

  2. #2

    Join Date
    Aug 2007
    Posts
    817
    Thank Post
    99
    Thanked 65 Times in 47 Posts
    Rep Power
    26
    Stab in the dark,

    You could create a login scipt that make the changes to the registry?
    It would look at the login name and only apply changes if XXXX is logging in.
    Probably an easier way to do this
    Good luck!

  3. #3

    Join Date
    Feb 2008
    Location
    Portsmouth
    Posts
    163
    Thank Post
    16
    Thanked 18 Times in 13 Posts
    Rep Power
    17
    Hi there

    Are you using network logons?

    You could open up registry, navigate to hkey users, then load hive and open the ntuser.dat of the account you want to lock down. Lock the profile as you wish using registry settings and unload hive.

    Then move the profile over to your domain controller and link it to the user you want to lock it's access down.

    Ta
    Nick

  4. #4
    swpmre's Avatar
    Join Date
    Sep 2007
    Location
    Salford, Greater Manchester
    Posts
    72
    Thank Post
    14
    Thanked 3 Times in 2 Posts
    Rep Power
    18
    Hi, no we're not using network logons. This is just a local profile.

  5. #5

    Join Date
    Feb 2008
    Location
    Portsmouth
    Posts
    163
    Thank Post
    16
    Thanked 18 Times in 13 Posts
    Rep Power
    17
    Then you could just copy the profiles on the other machines or use a logon script as suggested by burgemaster.

  6. #6
    swpmre's Avatar
    Join Date
    Sep 2007
    Location
    Salford, Greater Manchester
    Posts
    72
    Thank Post
    14
    Thanked 3 Times in 2 Posts
    Rep Power
    18
    Apologies, but I don't understand what you mean by "copy the profiles on the other machines". We don't have this working for any user / logon yet, so I can't copy those profiles :-(

  7. #7

    Join Date
    Feb 2008
    Location
    Portsmouth
    Posts
    163
    Thank Post
    16
    Thanked 18 Times in 13 Posts
    Rep Power
    17
    Quote Originally Posted by swpmre View Post
    Apologies, but I don't understand what you mean by "copy the profiles on the other machines". We don't have this working for any user / logon yet, so I can't copy those profiles :-(
    Sorry I meant once the profiles have been configured.

    Example of lock down registry settings can be found here.

    We have a number of laptops that we use for conferences and special events. I found locking down the registry this way for different profiles works quite well.

  8. #8

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,568 Times in 1,250 Posts
    Rep Power
    340
    If you use gpedit.msc locally then yes this will lock down all users. By setting other users as 'Users' or 'Limited user' will prevent users playing with more critical Control Panel components.

    Other than this Windows Server is your only realistic chance of doing things properly!

  9. #9
    RSoP_Robbers's Avatar
    Join Date
    Oct 2009
    Location
    Doncaster
    Posts
    101
    Thank Post
    13
    Thanked 8 Times in 8 Posts
    Rep Power
    11
    Hi swpmre

    What sort of scenario do you want to achieve?

    Do you have a number of laptops for example that you wish to place in a library and use the welcome screen to display a student logon etc?

SHARE:
+ Post New Thread

Similar Threads

  1. Win 2K3 Svr and user accounts
    By welshrt in forum Windows Server 2000/2003
    Replies: 0
    Last Post: 12th May 2010, 11:38 PM
  2. Replies: 0
    Last Post: 8th February 2010, 07:59 PM
  3. logon script to map specific user to share
    By techie211 in forum Scripts
    Replies: 3
    Last Post: 28th December 2009, 04:50 PM
  4. Power settings specific for a user.
    By shane-meh in forum Windows
    Replies: 2
    Last Post: 3rd June 2009, 06:41 PM
  5. Replies: 1
    Last Post: 17th June 2008, 12:41 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •