Gpedit.msc In Win Xp Pro

[chinook_apache]

yeah i do understand you can use external sources but....the gpedit is there and i want to use since its already there provided for use. the thing is any restrictions like to the control panel are applied to all users. i am wanting use gpedit for just one user

[chinook_apache]

anyone come across gpedit.msc in win xp pro?

[sparsely]

what do you mean, anyone come across it?
yeah, it's there on all XP pro machines.

To get user-specific, you're really gonna need an Active Directory on a 2000-2003 server.

Apart from that, you can deny permissions to control panel applets by locating the files and setting permissions.
if you want to just set a group of people at one time, create a new group (right-click My Computer > Manage > Users & Groups),
add the members to that group that you want to limit, go to the control panel applets (in C:\Windows\System32....
control panel applets have .cpl extensions) and set the permissions on the 'Security' Properties tab.

Kind of a long way...but it works.

[4play]

is it possible to make a new user group and add just the one person you want to not be able to access control panel.

then ban that group

[sparsely]

if you were just doing one person, creating a group wouldn't be necessary.
It's just easier to use a group if you got several people you want with the same permission settings.

*edit*

see...
in the properties dialog you select the Security tab, click 'Add', another window will open where you add the users or groups,
then back on the security tab you set their permissions as you wish.

[chinook_apache]

kool thanx for the feedback. so i will need a active directoy on a server to det these permissons....hmmm B)

[sparsely]

you need a domain controller w/Active Directory to employ true Group Policy.
But you can set permissions locally the way I described before.