WinXP security policy questions...

[InlineFive]

Is there a way that I can restrict a User/Limited User from changing some control panel settings and taskbar settings?

WinXP Pro.

Thanks!

-Por

 

[boomerang]

I wish I had all the peices of the puzzle for you, but I am in the process of trying to learn all this myself right now.

Go Start>Run and type gpedit.msc I think I see what you need in there. What I don't know is if there is anything else that needs to be done in conjunction, and/or prior with this.

 

[spyordie007]

yup you're on the right track; when you have the local policy up in the mmc browse to user configuration > administrative templates > control panel

 

[boomerang]

Oh yes, but what I don't see is what users are affected. I can make an assumption that the changes made here affect Limited Users and not Computer Administrators. This would make sense in that you have to be an Administrator to make the changes.

But does it affect any and all Limited Users? How would you set up differences for specific Limited Users. By making them a member of a Group?

I've been doing a lot of reading pertaining to these type of things just recently. All the myriad of choices in these regards in XP Pro are overwhelming to me. I'd like to find a book that dealt specifically with these kind of questions. Especially as they relate to security.

I just switched myself over to a Limited User here at home and it was three days before I realized Acronis wasn't making my daily backups on it's automatic schedule. I switched myself back for now. Too many things on my plate to deal with it right now.

I'd like to set the computers at my wife's office up so they are limited users and disable any potentially dangerous services. But to go in there and "experiment" is not going to get it. I need to keep their software running and their shares intact. I need to read up and understand this stuff first.

 

[InlineFive]

Originally posted by: boomerang
Oh yes, but what I don't see is what users are affected. I can make an assumption that the changes made here affect Limited Users and not Computer Administrators. This would make sense in that you have to be an Administrator to make the changes.

But does it affect any and all Limited Users? How would you set up differences for specific Limited Users. By making them a member of a Group?

I've been doing a lot of reading pertaining to these type of things just recently. All the myriad of choices in these regards in XP Pro are overwhelming to me. I'd like to find a book that dealt specifically with these kind of questions. Especially as they relate to security.

I just switched myself over to a Limited User here at home and it was three days before I realized Acronis wasn't making my daily backups on it's automatic schedule. I switched myself back for now. Too many things on my plate to deal with it right now.

I'd like to set the computers at my wife's office up so they are limited users and disable any potentially dangerous services. But to go in there and "experiment" is not going to get it. I need to keep their software running and their shares intact. I need to read up and understand this stuff first.

From my experiments I know that if you specify shares in the Administrator account it stays intact for when you login with the Limited User account. And if this is an issue you can make the Limited User a Network Configuration Operator.

And if these are scheduled tasks you can have them run as a specific user.

 

[tooltime]

boomerang/spyordie007, could you let me know any good resources on this? i agree there is a lot of info and seems to be spread among a lot of books/sites

wown has some good, short articles

 

[InlineFive]

Oh, new question. Can I have one application run in a User enviroment with Admin priveleges? This is for LiveUpdate! BTW...