Windows 8 has 2 options for setting account types:

  • Standard
  • Administrator

I'm looking for a way to make custom account types that have finer grained permission options available. For example I would like control over if a user can:

  • which control panel options they are allowed to view/modify
  • which external media they are allowed to use (which UUIDs are allowed)
  • white list / black list of applications allowed to run (including ones usually requiring administrative privileges)

You don't create a user account that has these permissions, you create Group Policy Objects which have these defined in them. Then, you apply them to Organizational Units in Active Directory that have the users or computers that you'd like them to apply to contained within.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.