Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am the admin of a Windows XP machine and I would like to make so that the guest account cannot access the Group Policy Editor. Is there any way to do that?

share|improve this question
up vote 0 down vote accepted

Unless you have added the "guest" into another group, they shouldn't be able to access it.

Default permissions are as follows for "gpedit.msc":

Administrators   = Full Control
Power Users      = Read & Execute
SYSTEM           = Full Control
Users            = Read & Execute
share|improve this answer
On the contrary, the guest account is a member of Users, so they can indeed access the .msc file, although that doesn't mean they can access group policy. – Hugh Allen May 25 '12 at 17:10

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.