Small business network security with TWEAKUI?

[XiZiT]

Hey techies, I set up a small network inside of my own business (20-25 users) all hooked up to my server (running Win2003). All client PCs are connected and are running WinXP Pro and login to the network. I would like to place some restrictions on the users such as disabling control panel and some other minor tweaks locally. Tweakui is perfect but how would I go about making the changes and not allowing the local user to use tweakui to change the settings?

 

[Rilex]

You don't use TweakUI for that kind of stuff, you should be using Group Policies instead.

 

[Genx87]

Originally posted by: Rilex
You don't use TweakUI for that kind of stuff, you should be using Group Policies instead.

 

[XiZiT]

Originally posted by: Rilex
You don't use TweakUI for that kind of stuff, you should be using Group Policies instead.

I just assumed that it's not that serious of an issue. The clients just use their PCs to do work and save to the server. Group Policies may be difficult to understand and implement as opposed to the simple interface of Tweakui. So is this still possible with Tweakui?

 

[spyordie007]

Users dont make group policy setting changes, the admin does.

 

[cleverhandle]

Basic group policies are not difficult to understand - you just look through the various policy options and select the ones you want. If you were to get fancier and want different profiles for different machines and users, then it's a little more complicated. But a simple default policy is not hard. As others have said, that's the correct solution here, not TweakUI.

 

[RebateMonger]

With that many users, it's definitely better to use a Domain and Group Policies. Users can't "undo" Group Policies, and you can do every computer at once.

TweakUI is unsupported by Microsoft. I wouldn't run it on business computers.