Win2k3 Non-DC Group Policy

[liquidtrance123]

If i'm not running a DC is there a way to create a Group Policy for an Individual group? I know of 'gpedit' but that seems like a machine group policy and I just need to change the Group policy for a specific group leaving the Admin accounts unchanged.

 

[Linuxtim]

You can edit the user part of the local machine policy, but that will effect all users. You could try to restrict access using folder permissions maybe, but that would take some time (i.e. only give read access to windows and program files folder). You'd have to test this a lot though!

L

 

[liquidtrance123]

I thought about that but restricting the windows or program files folders to read only, wouldn't that cause some problems with certain programs running that might need write access to certain files?

Long story short i'm going to need a DC aren't I?