the perfect mix of security and performance

ak5fxke9

Junior Member
Oct 24, 2000
17
0
0
I realize this question will be very overbroad, as I am not as experienced with this stuff as I would like to be. I work for a university that has multiple computer labs running Windows NT 4.0 sp6 with about 25 different software applications available for the students. The problem is, the way the security is set up now (just one logon account that everyone uses with a specific policy and unadjustable user profile), people are installing programs like winamp and winzip and are able to put unwanted icons in the universal start menu and also unwanted registry changes on that computer they are using. Also, under the current security profile, some software programs refuse to work, even when you logon as anything else and they work. Anyone have any suggestions or know of a good site that would help me establish a policy that would let all the software work while not letting users change anything?

ak5fxke9
 

Souka

Diamond Member
Sep 25, 2000
4,728
1
76
The account on the domain, not the local computer, needs to be changed.

Probably "Restricted User" would be best..... I quote, "Users can operate the computer and save documents, but cannot install programs or make potenitally damaging changes to the sysstem files and settings."

Unfortunately, many programs require access greater than this to operate...it's kinda hit n' miss.....

good luck, hope this helps.