Local Group Policy Editor Question

Hi, I have a question about the Local Group Policy Editor. I know you can either enable or disable things for all users but is there any way to enable or disable things for only a certain user group (either Standard Users in general or a customized user group created in the Local Users & Groups Editor (lusmgr.exe). For example if I want only a certain user group to be able to lock the computer, in the Local Group Policy Editor I can enable that so no-one can lock the computer but I want admins to be able too etc.

I would love it if someone could answer my question soon

Thanks
Daniel Callaghan

Secpol.msc / Local Policies / User Rights ? This won't stop them from logging off...
But this will: Start Menu - Enable or Disable Log off

Thanks but I don't want to stop them logging off (that I my eyes is a bit stupid because everyone has to log off eventualy lol) but I want only Admins to be able to lock the PC, but Standard Users can't. In the Local Group Policy Editor you only either enable or disable something for all users so I was wondering if there was a way to choose what user group you are enabling/disabling things for (Another example: I don't want standard users to be able to see the C drive but I want Admins too. You can disable seeing drives in the local group policy editor but that disables it for all users )

Thanks anyway

You could give this a try.

Open up regedit.exe

Go to the following location:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System

On the right-hand side, create a new DWORD 32-bit value named DisableLockWorkstation and give it one of these values:

1 – Disable Lock Workstation
0 – Enable Lock Workstation

You will have to be logged in as the user you want to stop form locking the screen when making the change.

Be sure and back up your registry before making changes.

James

WebMattR said:

dannycc said:

Thanks but I don't want to stop them logging off (that I my eyes is a bit stupid because everyone has to log off eventualy lol) but I want only Admins to be able to lock the PC, but Standard Users can't. In the Local Group Policy Editor you only either enable or disable something for all users so I was wondering if there was a way to choose what user group you are enabling/disabling things for (Another example: I don't want standard users to be able to see the C drive but I want Admins too. You can disable seeing drives in the local group policy editor but that disables it for all users )

Thanks anyway

You'd need an actual domain and domain level management to achieve what you're wanting, as far as I can tell.

Is there any way to get a domain and domain management/how do I set these up?



P.S. Thanks for the replys everyone