Windows – Restrict access for users on Windows 7

group-policyuser-accountswindows 7

Possible Duplicate:
How to apply group policy settings to specific local accounts in Windows

The internet cafe where I've just started working has just received some new Windows 7 computers. We currently have no Windows Server /Active Directory in place but would like to restrict users from accessing features like changing the theme, accessing control panel etc.

I have tried changing user settings in the local group policy, but policy is applied, it seems to affect the main Administrator account aswell.

Is it possible to to 'lock down' features and settings for standard users without affecting the administrator account using built in Windows functionality?

Or if not, is there any (preferably free or discounted for a non-profit) 3rd party software that could achieve this?

Best Answer

  • I don't believe this is an exact duplicate of How to apply group policy settings to specific local accounts in Windows

    When there's no domain, there are no shared groups or users for all the machines.

    You could generate a policy file in the method described, and distribute it manually.

    Another method is do generate .reg files containing the equivalent modifications. this link points to documentation of all the group policy parameters, and their equivalent registry key. each setting can apply to users or the whole machine - so you can choose between

    • restricting specific users, but not the administrator
    • restricting the whole machine and disabling these restrictions to the administrator
  • Related Question