user limit mido1971 12/17/2008 8:23:16 AM hi, i have two user as administrator how can i make limits for one of them , if i use policy group how can i do that for only one user where the user must be as administrator thanks for help

Re: user limit "Shenan Stanley" <newshelper[ at ]gmail.com> 12/17/2008 4:15:39 PM mido1971 wrote: [Quoted Text] > i have two user as administrator how can i make limits for one of > them , if i use policy group how can i do that for only one user > where the user must be as administrator "limit" and "administrator" - for Windows XP at least - these two words have no meaning together. If you want to limit what a user can do - you cannot make them an administrator. Start with the lowest level and *add* the access the user needs. Never try to give a user everything and then take away what they shouldn't have. Doesn't work in real life - doesn't work in computer security. ;-) I have found very few cases where a user *must be* an administrator (very special cases indeed - usually due to badly written software with no chance of upgrading/changes to something better written in the short term.) I have come across many cases where the physical user *believes* they must be an administrator. I have also come across many cases where the system administrator for the user just gave administrative rights to said user so they did not have to do their job. ;-) -- Shenan Stanley MS-MVP -- How To Ask Questions The Smart Way http://www.catb.org/~esr/faqs/smart-questions.html

Re: user limit mido1971 12/17/2008 4:44:30 PM thanks for your replay ok, i will not make the user as administrator only USER in windows xp pro how to make the limit of programs to use do i have to use the policy group in policy group i didnt fien any thing that diferece the users thanks again "Shenan Stanley" wrote: [Quoted Text] > mido1971 wrote: > > i have two user as administrator how can i make limits for one of > > them , if i use policy group how can i do that for only one user > > where the user must be as administrator > > "limit" and "administrator" - for Windows XP at least - these two words have > no meaning together. If you want to limit what a user can do - you cannot > make them an administrator. > > Start with the lowest level and *add* the access the user needs. Never try > to give a user everything and then take away what they shouldn't have. > Doesn't work in real life - doesn't work in computer security. ;-) > > I have found very few cases where a user *must be* an administrator (very > special cases indeed - usually due to badly written software with no chance > of upgrading/changes to something better written in the short term.) > > I have come across many cases where the physical user *believes* they must > be an administrator. I have also come across many cases where the system > administrator for the user just gave administrative rights to said user so > they did not have to do their job. ;-) > > -- > Shenan Stanley > MS-MVP > -- > How To Ask Questions The Smart Way > http://www.catb.org/~esr/faqs/smart-questions.html > > >