Hi guys, I am not running a domain or antying like that just a stand alone computer. This is the situation, i can use local security policy in administrative tools to set basic configurations on my computer but it doesn't have as much options as the Group Policy snap offers in MMC. I like that snap in cuz it has many more features, the only problem in, it applies the policies to everybody on the computer including me "the administrator" and not to just the regular users like my cousins and stuff that uses it. Is there a way to apply a Group Policy locally? Like without having Active Directory and deploying it? can't it just be done to the one computer but applied to the users? Then again i think i answered the question. I remember from the MCSE classes it can only be applied to an OU/site/domain :(... but if there is a work around somebody please let me know.

What are you trying to restrict from your cousins. If it is software, you can add a path rule to software restriction policies. Then you can inforce it to all users or let administrators use it.

If you turn off simple file sharing in windows xp, you should be able to enable and create a local workstation group policy for the single computer. All you would need to do is a create a new user group, apply the policy editor to it, and then change the other computer members groups to the new group you just created. The simple admin and limited accounts are very restricting, i usually just make mine admin and the others power users, and then edit the power users and that works fine.