GPedit - don't want global policy

I want to be able to stop one user accessing the Internet, not all
users, on a particular PC.

Is there any way to administer this using GPedit.msc (or otherwise) that
doesn't affect everyone?

In a stand alone enviroment, Group Policies apply to all user's of the machine. Additionally, if you're using broadband internet, via an Ethernet connection, its almost impossible to block all Internet Access without 3rd party software.

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"[0v0]" <no.address@nd.no.spam.com> wrote in message news:MPG.1dd458579f1459ca989890@news.individual.ne t...
>
> I want to be able to stop one user accessing the Internet, not all
> users, on a particular PC.
>
> Is there any way to administer this using GPedit.msc (or otherwise) that
> doesn't affect everyone?

In article <u#Yf8FK4FHA.4076@TK2MSFTNGP15.phx.gbl>, dknox@mvps.org
says...

> In a stand alone enviroment, Group Policies apply to all user's of the machine.

I can only apply them when, then? If I'm on a domain?

> Additionally, if you're using broadband internet, via an Ethernet connection,
> its almost impossible to block all Internet Access without 3rd party software.

This (or rather, that) PC is connecting via USB to ADSL. I guess the
same applies?

Use a software firewall that can have different settings per user such as
PortsLock. If you happen to be in an enterprise using ISA server you can
create firewall rules based on users/groups. The Shared Computer Toolkit is
another possibility as it can restrict access through Internet Explorer only
for a user. --- Steve

http://www.portslock.com/
http://www.microsoft.com/windowsxp/s...s/default.mspx --- MS Shared
Computer Toolkit [free]

"[0v0]" <no.address@nd.no.spam.com> wrote in message
news:MPG.1dd458579f1459ca989890@news.individual.ne t...
>
> I want to be able to stop one user accessing the Internet, not all
> users, on a particular PC.
>
> Is there any way to administer this using GPedit.msc (or otherwise) that
> doesn't affect everyone?

No, you can apply group policies on stand alone machine, but they will apply to all users of the machine. You can't apply policies to individual users in a non-domain environment.

I've never used ADSL, but I would assume the modem is available to all users. If they have to establish a connection (i.e. its not "always on") then there may be steps you can take, such as not making the connection available to all users.

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"[0v0]" <no.address@nd.no.spam.com> wrote in message news:MPG.1dd4714af241cc87989896@news.individual.ne t...
> In article <u#Yf8FK4FHA.4076@TK2MSFTNGP15.phx.gbl>, dknox@mvps.org
> says...
>
>> In a stand alone enviroment, Group Policies apply to all user's of the machine.
>
> I can only apply them when, then? If I'm on a domain?
>
>> Additionally, if you're using broadband internet, via an Ethernet connection,
>> its almost impossible to block all Internet Access without 3rd party software.
>
> This (or rather, that) PC is connecting via USB to ADSL. I guess the
> same applies?

You can certainly apply policies on a local machine to a particular user, it
is just fairly tricky. All you have to do is edit your policy then
immediately use Deny NTFS permissions to the user you don't want it applying
to (C:\WINDOWS\system32\GroupPolicy I think is the correct folder, it has
been a long time since I attempted this).

-Trevor

"Doug Knox MS-MVP" <dknox@mvps.org> wrote in message
news:erc1a4K4FHA.3036@TK2MSFTNGP15.phx.gbl...
No, you can apply group policies on stand alone machine, but they will apply
to all users of the machine. You can't apply policies to individual users in
a non-domain environment.

I've never used ADSL, but I would assume the modem is available to all
users. If they have to establish a connection (i.e. its not "always on")
then there may be steps you can take, such as not making the connection
available to all users.

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart
Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"[0v0]" <no.address@nd.no.spam.com> wrote in message
news:MPG.1dd4714af241cc87989896@news.individual.ne t...
> In article <u#Yf8FK4FHA.4076@TK2MSFTNGP15.phx.gbl>, dknox@mvps.org
> says...
>
>> In a stand alone enviroment, Group Policies apply to all user's of the
>> machine.
>
> I can only apply them when, then? If I'm on a domain?
>
>> Additionally, if you're using broadband internet, via an Ethernet
>> connection,
>> its almost impossible to block all Internet Access without 3rd party
>> software.
>
> This (or rather, that) PC is connecting via USB to ADSL. I guess the
> same applies?

I don't often recommend it because people can screw it up and wind up with real problems.

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"Trevor" <null@rottdog.com> wrote in message news:uud$QBL4FHA.1276@TK2MSFTNGP09.phx.gbl...
> You can certainly apply policies on a local machine to a particular user, it
> is just fairly tricky. All you have to do is edit your policy then
> immediately use Deny NTFS permissions to the user you don't want it applying
> to (C:\WINDOWS\system32\GroupPolicy I think is the correct folder, it has
> been a long time since I attempted this).
>
> -Trevor
>
> "Doug Knox MS-MVP" <dknox@mvps.org> wrote in message
> news:erc1a4K4FHA.3036@TK2MSFTNGP15.phx.gbl...
> No, you can apply group policies on stand alone machine, but they will apply
> to all users of the machine. You can't apply policies to individual users in
> a non-domain environment.
>
> I've never used ADSL, but I would assume the modem is available to all
> users. If they have to establish a connection (i.e. its not "always on")
> then there may be steps you can take, such as not making the connection
> available to all users.
>
> --
> Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart
> Display\Security
> Win 95/98/Me/XP Tweaks and Fixes
> http://www.dougknox.com
> --------------------------------
> Per user Group Policy Restrictions for XP Home and XP Pro
> http://www.dougknox.com/xp/utils/xp_securityconsole.htm
> --------------------------------
> Please reply only to the newsgroup so all may benefit.
> Unsolicited e-mail is not answered.
>
> "[0v0]" <no.address@nd.no.spam.com> wrote in message
> news:MPG.1dd4714af241cc87989896@news.individual.ne t...
>> In article <u#Yf8FK4FHA.4076@TK2MSFTNGP15.phx.gbl>, dknox@mvps.org
>> says...
>>
>>> In a stand alone enviroment, Group Policies apply to all user's of the
>>> machine.
>>
>> I can only apply them when, then? If I'm on a domain?
>>
>>> Additionally, if you're using broadband internet, via an Ethernet
>>> connection,
>>> its almost impossible to block all Internet Access without 3rd party
>>> software.
>>
>> This (or rather, that) PC is connecting via USB to ADSL. I guess the
>> same applies?
>
>