gpedit.msc versus secpol.msc

[trojanman]

I want to start learning how to use gpedit and secpol for non-domained pc's. I have one box that guests use to go online with but I need to lock it down. For example, remove the run command, no network browsing, cant modify start page, cant install software, and other things of that nature.

Which do I use for that, gpedit or secpol? Also, how do I change settings for just one user? I ran gpedit and went to User Config > Admin Templ. > Start Menu and Taskbar. I disabled the run command but it also disabled it for the admmin account which I obviously dont want to do.

 

[bcastner]

Secpol is a subset of gpedit.
Learn gpedit.

For your Administrator or selected user group policy question, consider:

http://searchvb.techtarget.com/tip/1,289483,sid8_gci843038,00.html

 

[trojanman]

thx!

Do you know of any good gp sites?

 

[bcastner]

Start with:

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q307882

Read all the links at bottom of this KB, particularly the last one (from which download the GP scenarios).

 

[bcastner]

Also, download the ADM templates:

http://www.microsoft.com/technet/security/prodtech/windowsxp/secwinxp/default.mspx