Archived from groups: microsoft.public.windowsxp.configuration_manage,microsoft.public.windowsxp.customize,microsoft.public.windowsxp.help_and_support (
More info?)
First off, if you want to prevent your wife from installing
software then leave her account as a member of the users group.
If you want to allow here to install software but not have full
administrative privileges then make her a member of the power
users group.
I'll have to admit, I really don't know why Microsoft decided to
set up Local Group Policy so that you can't apply individual
settings to different users and groups. My best guess is that, as
I mentioned before, it has to do with the basic difference
between a workgroup and a domain.
In a workgroup, each PC has it own collection of users and it's
own set of policies. If your the person in charge of overseeing
the day to day operation of these machines, how do you keep track
of who can do what on which machine? In a workgroup, simpler is
better. Start making things complicated and it becomes
unmanageable. Putting users in different groups (users, power
users, administrators, etc.) allows you to put some restrictions
on their activities. You also have some settings that can be set
for users and groups within the following section of Local Group
Policy:
Computer Configuration\Windows Settings\Security Settings\Local
Policies\User Rights Assignment
Since a domain provides a point of centralized administration, a
domain controller, it's much easier to implement policies that
determine, as I put it earlier, who can do what on which machine.
As for your options, you might find this program useful:
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
I haven't used this program but I've seen it recommended on these
newsgroups by people whose opinions I respect.
Good luck.
--
Nepatsfan
"AC" <krygaart@hotmail.com> wrote in message
news:u4odAor%23EHA.4072@TK2MSFTNGP10.phx.gbl...
> To all account means a mine? - ie user from administrators
> account?
>
> I have one single post with Win XP pro SP2. I would like to
> limit my wife to install the software.
>
> I am a user with administrator privileges and her is an user
> from user group.
>
> I am certain that the procedure will work (replacing the reg
> file is always miraculous) but I wonder why it does NOT work in
> the ordinary way?
>
> Thanks for your time.
>
>
> "Nepatsfan" <nepatsfan@SBXXXVIII.com> wrote in message
> news:mvidncMkKcFYe3rcRVn-1w@comcast.com...
>> I'm not sure I understand exactly what it is you're asking.
>>
>> Did you follow the procedure outlined in the article?
>> What were the results? Were there still settings applied to
>> administrative accounts?
>>
>> If you're wondering why the settings get applied to all
>> accounts by default then you need to consider the difference
>> between a workgroup and a domain. In a workgroup, Local Group
>> Policy is initially applied to all accounts.
>>
>>
>>
>> --
>> Nepatsfan
>> "AC" <krygaart@hotmail.com> wrote in message
>> news:O4bGzgf%23EHA.3376@TK2MSFTNGP12.phx.gbl...
>>> Thanks, but I know this article.
>>>
>>> I would like to know WHY it does not work <naturally> in my
>>> case.
>>>
>>> I am using McAfee Internet Security on Win Xp Pro Sp2... I
>>> have really no idea.
>>>
>>> Have you?
>>>
>>>
>>> "Nepatsfan" <nepatsfan@SBXXXVIII.com> wrote in message
>>> news:K9SdnZWKlpO3mHrcRVn-iA@comcast.com...
>>>> You might want to take a look here:
>>>>
>>>>
http://support.microsoft.com/default.aspx?scid=kb;en-us;293655
>>>>
>>>> It will apply to XP as well as Win2K.
>>>>
>>>> --
>>>> Nepatsfan
>>>> "AC" <krygaart@hotmail.com> wrote in message
>>>> news:Oj$DxLb%23EHA.2700@TK2MSFTNGP14.phx.gbl...
>>>>>I need some elucidation concerning user restriction.
>>>>>
>>>>> I have been trying to assign restriction for a sparticular
>>>>> user within users
>>>>> group (member of users) without applyint them to my account
>>>>> as a memeber of
>>>>> administrators.
>>>>>
>>>>> Trying to perform that in Group Policy setting window -
>>>>> User Configuration -
>>>>> Administrative Templates the result is applied to my
>>>>> account (member of
>>>>> administators).
>>>>>
>>>>> Is there any way of make restriction assigned to a users
>>>>> group or a single
>>>>> user. Or the only way to do it is 'limit account' setting
>>>>> for a specified
>>>>> user?
>>>>>
>>>>> Thank you in advance for any suggestion.
>>>>>
>>>>> AC
>>>>> Windows XP Pro SP2
>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>
Facebook
Twitter
Instagram