Local User policy (WXP-Pro)

[kingneb]

How do you edit what a "local user" can and can not do? I have 2 user accounts on my machine, one administrator, and one limited. For that limited account, how do you edit those denial changes further than default?

Thank You.

[SystemEngineer]

Open Registry Editor
go to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Contro l\Update

Add
VALUE__________TYPE_________DATA
UpdateMode_____REG_DWORD___2
NetworkPath_____REG_SZ______UNC path

Open System Policy Editor (poledit) create a new policy. Load up some ADM files. Add Users to your policy and set the restrictions.

Note: System Policy Editor does not allow configuration of local groups!

Note: Example of UNC path in registry:
C:\Netlogon\NTConfig.pol

For the example above to work save the policy as NTConfig.pol in the folder Netlogon on C drive.

Hope this helps

[kingneb]

Ok, I am lost here, I have no idea where you are trying to lead me, I can't find anything in the registry or the GPeditor that pertains to local users. I do not think the poledit exists in XP pro, if so how do you access it and edit the local user policy?

Thank you

[beginner]

Windows2000 used to have regedt32 ... now I think that the options of regedt32 are in regedit (in Win XP) ..... so check the security option in regedit for winXP

[Brf]

There is no regedit for WinXP. When you run Regedit it is actually running Regedt32.

[motoflop]

No, it's just opposite. Starting regedt32 will start regedit. Try yourself and check from Task Manager.

[Brf]

Ah....
I was looking in the system32 directory, rather than the windows one. The system32/regedt32.exe is only 4k, so I assume it is only a stub for the regedit.exe file.

[kingneb]

It's some time now, but let's go over this again. What is it that you do in an explicid manner to set permissions for local users. My machine is just an individual computer on a home workgroup, not a domain.

For one of the accounts I want to:

- Remove everything but the "programs menu, Turn off computer menu, and log off menu".

- Deny the ability to view, delete, and read the contents of the C: drive except the contents of the "my documents" folder

- Deny the ability to install any type of program / download programs from the internet.

- There are more too, the list goes on.

Thanks again and happy New Year,

kingneb, over and out