I am helping set up a library. I would like to customize and then prevent
changes to the start menu and the desktop.

I am able to do so by typing in the run dialogue box "gpedit.msc" All the
options I would like to set are avaliable in this control panel.

The problem is that what ever I select applies to both the user and the
administrator. Is there a simple way to get these options to apply to only
the administrator.

Thanks,

Joe

Hi Joe.

Download the new Shared Computer Toolkit from Microsoft [free!]. It requires
SP2 and it is made exactly for situations like yours. There is also greater
documentation with it and a dedicated newsgroup that is monitored by those
involved in the project at Microsoft. --- Steve

http://www.microsoft.com/windowsxp/s.../overview.mspx

"Joe Remlin" <Joe Remlin@discussions.microsoft.com> wrote in message
news:3385014E-1C7E-49BA-80BE-2F2DBC25786A@microsoft.com...
>I am helping set up a library. I would like to customize and then prevent
> changes to the start menu and the desktop.
>
> I am able to do so by typing in the run dialogue box "gpedit.msc" All the
> options I would like to set are avaliable in this control panel.
>
> The problem is that what ever I select applies to both the user and the
> administrator. Is there a simple way to get these options to apply to only
> the administrator.
>
> Thanks,
>
> Joe

Joe Remlin wrote:
> I am helping set up a library. I would like to customize and
> then prevent changes to the start menu and the desktop.
>
> I am able to do so by typing in the run dialogue box
> "gpedit.msc" All the options I would like to set are
> avaliable in this control panel.
>
> The problem is that what ever I select applies to both the
> user and the administrator. Is there a simple way to get
> these options to apply to only the administrator.
>
> Thanks,
>
> Joe

You might want to take a look at these articles:

How to apply local policies to all users except administrators
in a workgroup setting in Windows 2000 (works in XP)
http://support.microsoft.com/default...en-us%3B293655

Group Policy In A Workgroup Situation
http://www.theeldergeek.com/gp07.htm

Lockdown by group using Local Computer Policy without Active
Directory
http://tinyurl.com/687jj

I've found that the "Deny permission to Administrators"
approach
works best but with one safeguard. Make sure you create a
shortcut to the C:\Windows\Sytstem32 folder on the desktop of
an account that is a Computer Administrator. If not, you could
find yourself unable to run gpedit.msc in order to change
policy settings.

Keep in mind that this procedure only applies to policies that
are contained within the User Configuration.

An alternative approach would be to use this utility:

Doug Knox's XP Security Console
http://www.dougknox.com/xp/utils/xp_securityconsole.htm

Good luck

Nepatsfan

Thanks a million Nepatsfan. I will let you know if I have trouble.

Joe

"Nepatsfan" wrote:

> Joe Remlin wrote:
> > I am helping set up a library. I would like to customize and
> > then prevent changes to the start menu and the desktop.
> >
> > I am able to do so by typing in the run dialogue box
> > "gpedit.msc" All the options I would like to set are
> > avaliable in this control panel.
> >
> > The problem is that what ever I select applies to both the
> > user and the administrator. Is there a simple way to get
> > these options to apply to only the administrator.
> >
> > Thanks,
> >
> > Joe
>
> You might want to take a look at these articles:
>
> How to apply local policies to all users except administrators
> in a workgroup setting in Windows 2000 (works in XP)
> http://support.microsoft.com/default...en-us%3B293655
>
> Group Policy In A Workgroup Situation
> http://www.theeldergeek.com/gp07.htm
>
> Lockdown by group using Local Computer Policy without Active
> Directory
> http://tinyurl.com/687jj
>
> I've found that the "Deny permission to Administrators"
> approach
> works best but with one safeguard. Make sure you create a
> shortcut to the C:\Windows\Sytstem32 folder on the desktop of
> an account that is a Computer Administrator. If not, you could
> find yourself unable to run gpedit.msc in order to change
> policy settings.
>
> Keep in mind that this procedure only applies to policies that
> are contained within the User Configuration.
>
> An alternative approach would be to use this utility:
>
> Doug Knox's XP Security Console
> http://www.dougknox.com/xp/utils/xp_securityconsole.htm
>
> Good luck
>
> Nepatsfan
>
>
>
>