I created a limited user account and want to restrict USB and CD drive access using group policy settings. Hence I want to use gpedit.msc to enforce restrictions on the limited account and disable access to USB and CD drive, and prevent the limited account from modifying those changes. How can I achieve this without restricting any other accounts?
Answer
In Windows Vista and later you can apply policies only to a specific account, but you have to load the group policy object editor from the Microsoft Management Console, not by opening the snapin directly.
- Open mmc.exe
- When the MMC console opens, click "File" -> "Add/remove snapin"
- Select "Group Policy Object Editor" and click the "Add >" button
- In the dialog which appears, click "Browse".
Click the "users" tab and select a user.
- Click "OK", then "Finish", then "OK" again
You will now have a group policy user object for the selected user. Apply whatever restrictions you want. You may be interested in checking out "Hide these specified drives in My Computer" in User Configuration > Administrative Templates > Windows Components > Windows Explorer
.
Comments
Post a Comment