Local security policy

Local security policy
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Local security policy ramzi 01-23-2006
Posted by =?Utf-8?B?cmFtemk=?= on January 23, 2006, 2:11 am
If you were  Registered and logged in, you could reply and use other advanced thread options
please i have a network with workgroup not Domain
i need to create new group on each PC and give this group restrict privilige
or policy like unabe to uninstall program and like this...
how ican do that in the my workgroup network?
many thanks

Posted by Malke on January 23, 2006, 8:03 am
If you were  Registered and logged in, you could reply and use other advanced thread options
ramzi wrote:

> please i have a network with workgroup not Domain
> i need to create new group on each PC and give this group restrict
> privilige or policy like unabe to uninstall program and like this...
> how ican do that in the my workgroup network?
> many thanks

With XP Pro, make a new user group on each machine. Since you don't have
a domain, you'll need to do this on each individual workstation. Assign
users to that group and set your permissions and rights as desired with
group policy. For questions about using the Group Policy Editor, post
here: microsoft.public.windows.group_policy

Here's a useful KB article which is applicable to XP:

How to apply local policies to all users except administrators in a
workgroup setting in Windows 2000 -
http://support.microsoft.com/default.aspx?scid=kb;en-us;293655

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Posted by Steven L Umbach on January 23, 2006, 12:20 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
As Malke said you can create a new group and then make sure that they are
only members of the users group that will prevent them from installing most
applications such as those that would write to the system and/or program
files folder. From there you can adjust NTFS permissions to control what
folders the users can access. If you happen to be using XP be sure to look
at the free Shared Computer Toolkit from Microsoft at the link below. ---
Steve

http://www.microsoft.com/windowsxp/sharedaccess/overview.mspx


> please i have a network with workgroup not Domain
> i need to create new group on each PC and give this group restrict
> privilige
> or policy like unabe to uninstall program and like this...
> how ican do that in the my workgroup network?
> many thanks



Posted by Roger Abell [MVP] on January 24, 2006, 12:04 am
If you were  Registered and logged in, you could reply and use other advanced thread options
www.microsoft.com/gp
links to most content related to group policy.

You should review the capabilities of group policy, keeping
in mind that local group policy is much more limited than is
Active Directory based group policy's GPO usage.

In particular, anything that you set with local group policy
in a workgroup machine will control all accounts (i.e. that
includes the admins - you cannot pick and choose, at least
not simply, this for those accounts and that for those others).

After that familiarization, and do include looking into the
Shared Computer toolkit Steve mentioned, you might find,
depending on just how many machines you have, that it is
more cost effective in the long run to set up a domain.

--
Roger Abell
Microsoft MVP (Windows Server : Security)

> please i have a network with workgroup not Domain
> i need to create new group on each PC and give this group restrict
> privilige
> or policy like unabe to uninstall program and like this...
> how ican do that in the my workgroup network?
> many thanks



Similar ThreadsPosted
Local Security Policy November 9, 2006, 10:31 am
can't open local security policy July 12, 2005, 11:20 pm
Exporting local security policy settings in Server 2003 August 15, 2006, 11:46 am
Domain Policy vs Local Policy September 29, 2005, 5:02 pm
rogue local policy May 17, 2008, 1:16 pm
Local Policy Does Not Permit You to Log On Interactively February 17, 2006, 10:18 am
Copying local policy from one computer to another (No AD) March 17, 2006, 3:29 pm
Security policy / ACL October 18, 2005, 3:20 am
Local v. Network Security October 24, 2005, 4:32 pm
Local disk security July 8, 2008, 2:10 pm

The site map in XML format XML site map

Contact Us | Privacy Policy