Group Restrictions (Help)

[Microslave]

How do I assign a restriction to a user/group, while having the administrator retain the ability to use the OS w/o that Restriction?

Recently I made it so users can't change their Resoulutions, but that also prevented me (Administrator) from changing it aswell? I'm using "gpedit.msc" to do all this BTW.

Thanks.

[RWSchlatter]

The Group Policy in WinXP is carried forward from Win2K. It's Active Directory based groups and not the user groups as had been known in WinNT. For a standalone machine these policies are local machine policies.

As far J remember, the documented way for Win2K is to set the group policy files in the Windows system directory, subdirectory ???, to read-only for the Administrators group and read-write for all other users. Setting the policies requires to toggle this permission.

Take care: J just crashed my Win2K machine that also has my XP systems running, so J cannot promise you that above statement is correct, nor can J give you the reference at this moment.

______________
Regards - Richard

[RWSchlatter]

the reference J intended to give you in my previous post:

There is one documented workaround, that lets you exclude the Administrators from the local policy settings. Please follow instructions in section "Local Group Policy settings on a local computer" in:
http://support.microsoft.com/support/kb/articles/Q274/4/78.ASP



______________
Regards - Richard