Tue Dec 7 11:41:19 2004 Some control
of XP with GPEDIT.MSC
Posted by Tony Lawrence
Search Keys: security group policy
Tom Heneghan sent me this link about using "gpedit.msc" in Windows XP to create group policies on a specific, stand-alone machine. Administrators in small shops who don't want to go to full-fledged lockdown might find some of this useful. This is the same tool that you'd use for a domain-wide group policy; this is just running it locally. This is on XP Pro only (but only fools run XP Home anyway).
As the article suggests, this would also be useful for tightening down a specific machine, such as one left unattended in a semi-public area.
A similar article with a bit more detail is at https://www.theeldergeek.com/group_policy_for_windows_xp_prof.htm.
I played around with this on my wife's XP machine (sorry, honey, but I have to use yours because I don't have Windows). I ran "gpupdate" to activate policies, but it just hung - nervously I logged out and back in, which is the other way to get XP to quickly notice a change. I was nervous because it's really not a good idea to break your wife's computer.
Hint: if you do something bad to your spouse's machine, it's probably best to drop it on the floor, jump on it hard and say nothing about your experiments. Clumsiness is easier to forgive than breakage by tinkering.
Fortunately all was well. The change I had made was to adjust her IE and Outlook title bars so that they now read "Microsoft Outlook provided by your husband for you". She probably won't even notice. Someone else might want "provided for business use only" or other text.
There are more useful abilities here - eliminating potential security problems like Windows Messenger, and more.
Got something to add? Send me email.
More Articles by Tony Lawrence © 2009-11-07 Tony Lawrence