can you set a group policy w/o a domain

[ShuckyD]

I want to setup either a group policy or a local policy to restrict users in a certain group on a server (Citrix/Terminal Server) to only see relevant drives, files, etc. I know from experience that the group policy editor for Server 2k3 works inside a domain, but can it be used on a workgroup, because it has the word group in group policy I was hoping it would also work to configure local policies for specific groups on the computer. Or does that all have to be done on the local security policy, if so can that be deployed to certain groups, etc?

[excuzzzeme]

Without a domain you would need to set NTFS permissions. A real pain, group policy is far easier.

Make sure you remove "Everyone" from the NTFS permissions.

[ShuckyD]

how would I go about that? My goal is to have users set to a group where they only see a drive that I create for them, I dont want them to see system drives/files, etc. How would you go about doing that w/o a domain? Is it a local policy thing?