 |
 |
 |
Managing Windows Vista Group Policy (Part 2)
Friday, December 1st, 2006
If you ever tried administering locked down ‘kiosk’ computers in public places like libraries or any 
other place where you have Windows 2000/XP/2003 computers set up for public use, you probably fought a great deal with local policies yourself, even when logged on as an administrator. The thing is that, before Windows Vista, we had only one set of policies on the local computer – general Computer settings and general User settings – these policies applied to all users who logged on, no matter what! Administration of such tightly locked down computers could be a very cumbersome affair where you sometimes have to disable some very restrictive policies, edit whatever needed to be changed and then re-enable the policies.
With Windows Vista the concept of MLGPO is introduced – previously we only had Local Group Policy Objects (LGPO). Typically MLGPOs will be used in non-Active Directory environments where you have standalone or workgroup computers, and the great thing is that it now supports different policy configurations for ”Administrators” and ”Non-Administrators” (”limited users”) and even specific policy settings for individual users! If a given user is not a member of the “administrators” group, then the user is automatically considered a “non-administrator”, which is actually not a security group in itself. Managing Windows Vista Group Policy (Part 2)
Popular Posts
Please read our Disclaimer
