How to set group policies only for users groups, using GPEDIT
Written by Fernando Muñoz
viernes, 01 julio 2005
"Gpedit" is a tool which is included in Prof version of WinXP. With this tool we can enable changes in group policies, changes which allow us to define, specify and restrict some functionalities of our machine. Sadly, these policies apply by default to all users that use the machine. With this tip we will see how to restrict them to everyone but administrators group.
To get it, I am going to describe the steps, by means of an example on which we will disable using the control panel only to machine's users (without including those one in administrator group). Let us start:
1. Login in with an administrator account and Start/Run and type in "gpedit.msc".
2. On this screen, browse to "user configuration/administrative templates" and on it, we enable the policies to restrict to users (for instance, forbid the access to control panel).
3. When the changes are done, open the registry (start/run and type in "regedit") and browse to the key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
There we will find two folders hanging from parent one, named "explorer" and "system". On these ones, there is a series of values, set as "1".
In the example, we had disabled going into control panel. We are going to enable it. To do this, in the registry, browse to the key
In the right panel, we look for "NoControlPanel" value and we change its value to "0" (by default it is "1" because we have enabled by means of policy editor).
4. Logoff the administrator session and login again, with the same rights (as administrator). We will find that we are able to go to control panel.
5. Logoff then administrator session and login with rights of a restricted user. We will check that for these restricted users, the restrictions are enabled.
Filtro
No comments...
Escribir un comentario
Por favor, mantenga el asunto de los mensajes relevantes al tema del artículo.
Los ataques verbales personales serán eliminados.
Por favor, no emplee comentarios para promocionar su sitio web. Este tipo de mensajes serán eliminados
Regedit Guide 
