How do I set up a policy on a computer to lock everybody out of EVERYTHING (without an NT server), but allow the admin account to do everything?

I went into gpedit.msc to edit the settigns but there's no way to specify what group you want to attach those policies to.

Thanks.

 

Can you use network-based policies instead of the local computer's policy (gpedit.msc)?

If so, create the policy the way you want it in AD, and set the permissions for the "Apply group policy" setting to deny for domain adminis. The policy will not be applied to people in the domain admins group, and if you set the permissions to apply on "authenticated users" they will all have that policy when they log in.

 

This is the hot topic today.

 

No, my retard boss doesn't like Windows, so we use Novell to log in. It's retarddeeeddddd

 

Thy this with a spare machine if you have one.

1. Log on to the machine normally - as the administrator to establish a clean profile for yourself.
2. Set your policies the way you want using gpedit.msc
3. Restart and log on as a normal user (desktop should be locked down)
4. Use the runas command (while still in as a locked down user) to run gpedit.msc and reverse the changes that you policied (set them to "not configured").
5. Restart and log back in as yourself (administrator).
6. Copy the users profile over the "default user" profile in documents and settings (use the users profiles tool in the system properties to do that)

Now - all new users that log onto that workstation will have the policied settings that were in effect when the workstation was logged on as the "normal user".

Let me know if that got it for you.

 

I have a question too..

You know how you can use the welcome screen to login, Well thats how my computer used to be till, I came back after vacation for 3 days and turned it on and it went to windows classic mode. Now whenever I login it asks me to type in the users name, instead of just clicking, its a pain..

I have tried changing it in User Accounts and Changing the way users log in and out, but it makes no difference, the big thing is, me and my dad share the laptop, so I usually just press WINDOWS KEY + L and usually log off and he can do his thing on his name and my stuff dont get disturbed.. Now each user has to log off..

PLEASE HELP

By The Way I have XP Pro