Windows Thread, locking down specific user in Win XP in Technical; Hi all,
Perhaps I am not using the correct words when I google this, but I can't find an answer, ...
25th May 2010, 02:47 PM #1
locking down specific user in Win XP
Perhaps I am not using the correct words when I google this, but I can't find an answer, so I'll try here!
I'm trying to lock down a particular user on some Windows XP machines. We don't use Active Directory, so I can't do a Group Policy.
I would like (for instance) to restrict access to various programmes, control panel etc, but only on one user account. I'd like all the others to remain the same.
I've tried using gpedit.msc, but Group Policy Editor changes the settings for all users on the PC.
Any other ideas?
25th May 2010, 02:51 PM #2
Stab in the dark,
You could create a login scipt that make the changes to the registry?
It would look at the login name and only apply changes if XXXX is logging in.
Probably an easier way to do this
25th May 2010, 03:41 PM #3
- Rep Power
Are you using network logons?
You could open up registry, navigate to hkey users, then load hive and open the ntuser.dat of the account you want to lock down. Lock the profile as you wish using registry settings and unload hive.
Then move the profile over to your domain controller and link it to the user you want to lock it's access down.
25th May 2010, 03:59 PM #4
Hi, no we're not using network logons. This is just a local profile.
25th May 2010, 04:29 PM #5
- Rep Power
Then you could just copy the profiles on the other machines or use a logon script as suggested by burgemaster.
25th May 2010, 04:36 PM #6
Apologies, but I don't understand what you mean by "copy the profiles on the other machines". We don't have this working for any user / logon yet, so I can't copy those profiles :-(
25th May 2010, 04:53 PM #7
- Rep Power
Sorry I meant once the profiles have been configured.
Originally Posted by swpmre
Example of lock down registry settings can be found here.
We have a number of laptops that we use for conferences and special events. I found locking down the registry this way for different profiles works quite well.
25th May 2010, 06:35 PM #8
If you use gpedit.msc locally then yes this will lock down all users. By setting other users as 'Users' or 'Limited user' will prevent users playing with more critical Control Panel components.
Other than this Windows Server is your only realistic chance of doing things properly!
25th May 2010, 09:03 PM #9
What sort of scenario do you want to achieve?
Do you have a number of laptops for example that you wish to place in a library and use the welcome screen to display a student logon etc?
By welshrt in forum Windows Server 2000/2003
Last Post: 13th May 2010, 12:38 AM
By SYNACK in forum Windows Vista
Last Post: 8th February 2010, 08:59 PM
By techie211 in forum Scripts
Last Post: 28th December 2009, 05:50 PM
By shane-meh in forum Windows
Last Post: 3rd June 2009, 07:41 PM
By Ben_Stanton in forum Windows
Last Post: 17th June 2008, 01:41 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)