Group Policy without a Domain or Server

[barry]

Goal: Limit student use of programs,system settings and
files, and set broader permissions for instructors. With
out Active Directory, Server or Domains.

We are setting up security and permissions on a peer-to-
peer network for a new Computer Lab (education).Having a
problem understanding how to work with group and user
policies and permission in Windows XP Pro. Trying to use
the Microsoft Management Console or GPE, but not doing
well. Can you help or know a good Web source
or "understandable" instructions for "locking down" the
computers(by groups) and also how to setup the initial
policies on one local computer and then copy those
settings to the additional 9 computers. I have
been exploring the Microsoft site for days and getting
very confused. Since these machines will have many users
(students of all ages) we are trying to set the limits
tight.

Thanx.

[Roger Abell]

Outside of a domain you only get Local Security Policy
and it is applied equally to all accounts.
There are about five ways to work around this limitation.
You can revert to the old System Policies, you can define
a set of local group policies and then exempt a set of accounts
from having any of the local group policies applied, you can
avoid both system and group policy and just use registry
settings, or, you can follow a rather troublesome hackish
method MS has outlined in a KB article, or you can purchase
third-party software (which effectively automates the registry
approach for you).
In your case, with what appears to be three classes of
accounts, students, instructors, admins, the direct registry
method may be what suites the situation best.

--
Roger Abell
Microsoft MVP (Windows, Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"barry" <cl...@artinusa.com> wrote in message
news:384201c37ad6$53f570d0$a601...@phx.gbl...

[barry]

Roger,
Thank you, that what I was afraid of. The Group Policy
editor will block most everything and I guess that is the
way we will go til we install a server.

>.
>

[Roger Abell]

No problem. If you look back a week or two you will
see the two lead alternatives mentioned at least a couple
times per week.

--
Roger Abell
Microsoft MVP (Windows, Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"barry" <cl...@artinusa.com> wrote in message

news:033601c37b24$73810420$a301...@phx.gbl...