PC Review


Reply
Thread Tools Rate Thread

Desktop Policies

 
 
=?Utf-8?B?THVpeg==?=
Guest
Posts: n/a
 
      13th Feb 2006
I would like to know on windows xp based computers how to avoid ordinary
users with local administrator privileges from deleting desktop shortcuts
(ex. shortcut to word document) created by local administrators (advanced
users).

Palataform: Windows XP
Network: Novell
Drive C (location where Windows XP is installed): FAT32
Drive G (location where the files are located): Novell - The files are
located in a folder with read only privileges.

The ordinary users log on XP workstations with administrator privileges.

Is there a Microsoft document explaining how to do this?

Thanks in advance,


 
Reply With Quote
 
 
 
 
bagins
Guest
Posts: n/a
 
      13th Feb 2006
Hi, Luiz,
Microsoft documents will explain that ordinary users should not log in as
administrators.
If you are administrator, you have absolute power over your machine. You can
delete files, format drives and do other potentially dangerous things.
Users should log in as ordinary users, nothing more.





"Luiz" <(E-Mail Removed)> wrote in message
news:4A2BB49E-086D-42E4-89E7-(E-Mail Removed)...
>I would like to know on windows xp based computers how to avoid ordinary
> users with local administrator privileges from deleting desktop shortcuts
> (ex. shortcut to word document) created by local administrators (advanced
> users).
>
> Palataform: Windows XP
> Network: Novell
> Drive C (location where Windows XP is installed): FAT32
> Drive G (location where the files are located): Novell - The files are
> located in a folder with read only privileges.
>
> The ordinary users log on XP workstations with administrator privileges.
>
> Is there a Microsoft document explaining how to do this?
>
> Thanks in advance,
>
>



 
Reply With Quote
 
bagins
Guest
Posts: n/a
 
      13th Feb 2006
Hi, Luiz,
Microsoft documents will explain that ordinary users should not log in as
administrators.
If you are administrator, you have absolute power over your machine. You can
delete files, format drives and do other potentially dangerous things.
Users should log in as ordinary users, nothing more.





"Luiz" <(E-Mail Removed)> wrote in message
news:4A2BB49E-086D-42E4-89E7-(E-Mail Removed)...
>I would like to know on windows xp based computers how to avoid ordinary
> users with local administrator privileges from deleting desktop shortcuts
> (ex. shortcut to word document) created by local administrators (advanced
> users).
>
> Palataform: Windows XP
> Network: Novell
> Drive C (location where Windows XP is installed): FAT32
> Drive G (location where the files are located): Novell - The files are
> located in a folder with read only privileges.
>
> The ordinary users log on XP workstations with administrator privileges.
>
> Is there a Microsoft document explaining how to do this?
>
> Thanks in advance,
>
>



 
Reply With Quote
 
=?Utf-8?B?THVpeg==?=
Guest
Posts: n/a
 
      13th Feb 2006
Hi,

The ordinary users needs administrator privileges because they change the
time settings, but we are trying to implement a policie to restrict desktop
shortcuts to be deleted.

Thanks,

"bagins" escreveu:

> Hi, Luiz,
> Microsoft documents will explain that ordinary users should not log in as
> administrators.
> If you are administrator, you have absolute power over your machine. You can
> delete files, format drives and do other potentially dangerous things.
> Users should log in as ordinary users, nothing more.
>
>
>
>
>
> "Luiz" <(E-Mail Removed)> wrote in message
> news:4A2BB49E-086D-42E4-89E7-(E-Mail Removed)...
> >I would like to know on windows xp based computers how to avoid ordinary
> > users with local administrator privileges from deleting desktop shortcuts
> > (ex. shortcut to word document) created by local administrators (advanced
> > users).
> >
> > Palataform: Windows XP
> > Network: Novell
> > Drive C (location where Windows XP is installed): FAT32
> > Drive G (location where the files are located): Novell - The files are
> > located in a folder with read only privileges.
> >
> > The ordinary users log on XP workstations with administrator privileges.
> >
> > Is there a Microsoft document explaining how to do this?
> >
> > Thanks in advance,
> >
> >

>
>
>

 
Reply With Quote
 
bagins
Guest
Posts: n/a
 
      13th Feb 2006
Ah, ok.
You can give the right to change system time to ordinary users using local
security policy.
Local Security Policy -> Local Policies -> User Rights Assignment -> Change
the System Time

You can also try with mandatory user profiles, but it is a lot of work,
especially if your machines are not domain members.
More about man profiles:
http://support.microsoft.com/default...307800&sd=tech







"Luiz" <(E-Mail Removed)> wrote in message
news:E9076A28-60E8-4457-92A5-(E-Mail Removed)...
> Hi,
>
> The ordinary users needs administrator privileges because they change the
> time settings, but we are trying to implement a policie to restrict
> desktop
> shortcuts to be deleted.
>
> Thanks,
>
> "bagins" escreveu:
>
>> Hi, Luiz,
>> Microsoft documents will explain that ordinary users should not log in as
>> administrators.
>> If you are administrator, you have absolute power over your machine. You
>> can
>> delete files, format drives and do other potentially dangerous things.
>> Users should log in as ordinary users, nothing more.
>>
>>
>>
>>
>>
>> "Luiz" <(E-Mail Removed)> wrote in message
>> news:4A2BB49E-086D-42E4-89E7-(E-Mail Removed)...
>> >I would like to know on windows xp based computers how to avoid ordinary
>> > users with local administrator privileges from deleting desktop
>> > shortcuts
>> > (ex. shortcut to word document) created by local administrators
>> > (advanced
>> > users).
>> >
>> > Palataform: Windows XP
>> > Network: Novell
>> > Drive C (location where Windows XP is installed): FAT32
>> > Drive G (location where the files are located): Novell - The files are
>> > located in a folder with read only privileges.
>> >
>> > The ordinary users log on XP workstations with administrator
>> > privileges.
>> >
>> > Is there a Microsoft document explaining how to do this?
>> >
>> > Thanks in advance,
>> >
>> >

>>
>>
>>




 
Reply With Quote
 
Steven L Umbach
Guest
Posts: n/a
 
      16th Feb 2006
Bagins told you how to give uses the ability to change system time which is
not a good idea if the computers are in an Active Directory domain. You can
also manage NTFS permissions on the desktop folders for all users and user
profile so that users have only read/list/execute permission. Of course any
administrator or owner of the folder can change permissions on that folder
if they know how to and desire to . --- Steve



"Luiz" <(E-Mail Removed)> wrote in message
news:E9076A28-60E8-4457-92A5-(E-Mail Removed)...
> Hi,
>
> The ordinary users needs administrator privileges because they change the
> time settings, but we are trying to implement a policie to restrict
> desktop
> shortcuts to be deleted.
>
> Thanks,
>
> "bagins" escreveu:
>
>> Hi, Luiz,
>> Microsoft documents will explain that ordinary users should not log in as
>> administrators.
>> If you are administrator, you have absolute power over your machine. You
>> can
>> delete files, format drives and do other potentially dangerous things.
>> Users should log in as ordinary users, nothing more.
>>
>>
>>
>>
>>
>> "Luiz" <(E-Mail Removed)> wrote in message
>> news:4A2BB49E-086D-42E4-89E7-(E-Mail Removed)...
>> >I would like to know on windows xp based computers how to avoid ordinary
>> > users with local administrator privileges from deleting desktop
>> > shortcuts
>> > (ex. shortcut to word document) created by local administrators
>> > (advanced
>> > users).
>> >
>> > Palataform: Windows XP
>> > Network: Novell
>> > Drive C (location where Windows XP is installed): FAT32
>> > Drive G (location where the files are located): Novell - The files are
>> > located in a folder with read only privileges.
>> >
>> > The ordinary users log on XP workstations with administrator
>> > privileges.
>> >
>> > Is there a Microsoft document explaining how to do this?
>> >
>> > Thanks in advance,
>> >
>> >

>>
>>
>>



 
Reply With Quote
 
bagins
Guest
Posts: n/a
 
      16th Feb 2006
Hi, Steven,
you are absolutely right regarding dangers of changing system time, but
Luiz said that they have FAT32 (admins nightmare ;-) ), so NTFS security is
out of question. Of course they can change fat to ntfs, but I am afraid that
Novel will not boot anymore.
Regards


"Steven L Umbach" <(E-Mail Removed)> wrote in message
news:X9idnaekBZaAb27eRVn-(E-Mail Removed)...
> Bagins told you how to give uses the ability to change system time which
> is not a good idea if the computers are in an Active Directory domain. You
> can also manage NTFS permissions on the desktop folders for all users and
> user profile so that users have only read/list/execute permission. Of
> course any administrator or owner of the folder can change permissions on
> that folder if they know how to and desire to . --- Steve
>
>
>
> "Luiz" <(E-Mail Removed)> wrote in message
> news:E9076A28-60E8-4457-92A5-(E-Mail Removed)...
>> Hi,
>>
>> The ordinary users needs administrator privileges because they change the
>> time settings, but we are trying to implement a policie to restrict
>> desktop
>> shortcuts to be deleted.
>>
>> Thanks,
>>
>> "bagins" escreveu:
>>
>>> Hi, Luiz,
>>> Microsoft documents will explain that ordinary users should not log in
>>> as
>>> administrators.
>>> If you are administrator, you have absolute power over your machine. You
>>> can
>>> delete files, format drives and do other potentially dangerous things.
>>> Users should log in as ordinary users, nothing more.
>>>
>>>
>>>
>>>
>>>
>>> "Luiz" <(E-Mail Removed)> wrote in message
>>> news:4A2BB49E-086D-42E4-89E7-(E-Mail Removed)...
>>> >I would like to know on windows xp based computers how to avoid
>>> >ordinary
>>> > users with local administrator privileges from deleting desktop
>>> > shortcuts
>>> > (ex. shortcut to word document) created by local administrators
>>> > (advanced
>>> > users).
>>> >
>>> > Palataform: Windows XP
>>> > Network: Novell
>>> > Drive C (location where Windows XP is installed): FAT32
>>> > Drive G (location where the files are located): Novell - The files are
>>> > located in a folder with read only privileges.
>>> >
>>> > The ordinary users log on XP workstations with administrator
>>> > privileges.
>>> >
>>> > Is there a Microsoft document explaining how to do this?
>>> >
>>> > Thanks in advance,
>>> >
>>> >
>>>
>>>
>>>

>
>



 
Reply With Quote
 
Steven L Umbach
Guest
Posts: n/a
 
      16th Feb 2006
Thanks for that as I missed the part about FAT32. --- Steve


"bagins" <dejan /at\ levaja /dot\ com> wrote in message
news:(E-Mail Removed)...
> Hi, Steven,
> you are absolutely right regarding dangers of changing system time, but
> Luiz said that they have FAT32 (admins nightmare ;-) ), so NTFS security
> is out of question. Of course they can change fat to ntfs, but I am afraid
> that Novel will not boot anymore.
> Regards
>
>
> "Steven L Umbach" <(E-Mail Removed)> wrote in message
> news:X9idnaekBZaAb27eRVn-(E-Mail Removed)...
>> Bagins told you how to give uses the ability to change system time which
>> is not a good idea if the computers are in an Active Directory domain.
>> You can also manage NTFS permissions on the desktop folders for all users
>> and user profile so that users have only read/list/execute permission. Of
>> course any administrator or owner of the folder can change permissions on
>> that folder if they know how to and desire to . --- Steve
>>
>>
>>
>> "Luiz" <(E-Mail Removed)> wrote in message
>> news:E9076A28-60E8-4457-92A5-(E-Mail Removed)...
>>> Hi,
>>>
>>> The ordinary users needs administrator privileges because they change
>>> the
>>> time settings, but we are trying to implement a policie to restrict
>>> desktop
>>> shortcuts to be deleted.
>>>
>>> Thanks,
>>>
>>> "bagins" escreveu:
>>>
>>>> Hi, Luiz,
>>>> Microsoft documents will explain that ordinary users should not log in
>>>> as
>>>> administrators.
>>>> If you are administrator, you have absolute power over your machine.
>>>> You can
>>>> delete files, format drives and do other potentially dangerous things.
>>>> Users should log in as ordinary users, nothing more.
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> "Luiz" <(E-Mail Removed)> wrote in message
>>>> news:4A2BB49E-086D-42E4-89E7-(E-Mail Removed)...
>>>> >I would like to know on windows xp based computers how to avoid
>>>> >ordinary
>>>> > users with local administrator privileges from deleting desktop
>>>> > shortcuts
>>>> > (ex. shortcut to word document) created by local administrators
>>>> > (advanced
>>>> > users).
>>>> >
>>>> > Palataform: Windows XP
>>>> > Network: Novell
>>>> > Drive C (location where Windows XP is installed): FAT32
>>>> > Drive G (location where the files are located): Novell - The files
>>>> > are
>>>> > located in a folder with read only privileges.
>>>> >
>>>> > The ordinary users log on XP workstations with administrator
>>>> > privileges.
>>>> >
>>>> > Is there a Microsoft document explaining how to do this?
>>>> >
>>>> > Thanks in advance,
>>>> >
>>>> >
>>>>
>>>>
>>>>

>>
>>

>
>



 
Reply With Quote
 
bagins
Guest
Posts: n/a
 
      16th Feb 2006
Thank you.

Regards

--
*** bagins ***





"Steven L Umbach" <(E-Mail Removed)> wrote in message
news:5vudnSNrA5O7KWneRVn-(E-Mail Removed)...
> Thanks for that as I missed the part about FAT32. --- Steve
>
>
> "bagins" <dejan /at\ levaja /dot\ com> wrote in message
> news:(E-Mail Removed)...
>> Hi, Steven,
>> you are absolutely right regarding dangers of changing system time,
>> but Luiz said that they have FAT32 (admins nightmare ;-) ), so NTFS
>> security is out of question. Of course they can change fat to ntfs, but I
>> am afraid that Novel will not boot anymore.
>> Regards
>>
>>
>> "Steven L Umbach" <(E-Mail Removed)> wrote in message
>> news:X9idnaekBZaAb27eRVn-(E-Mail Removed)...
>>> Bagins told you how to give uses the ability to change system time which
>>> is not a good idea if the computers are in an Active Directory domain.
>>> You can also manage NTFS permissions on the desktop folders for all
>>> users and user profile so that users have only read/list/execute
>>> permission. Of course any administrator or owner of the folder can
>>> change permissions on that folder if they know how to and desire to
>>> --- Steve
>>>
>>>
>>>
>>> "Luiz" <(E-Mail Removed)> wrote in message
>>> news:E9076A28-60E8-4457-92A5-(E-Mail Removed)...
>>>> Hi,
>>>>
>>>> The ordinary users needs administrator privileges because they change
>>>> the
>>>> time settings, but we are trying to implement a policie to restrict
>>>> desktop
>>>> shortcuts to be deleted.
>>>>
>>>> Thanks,
>>>>
>>>> "bagins" escreveu:
>>>>
>>>>> Hi, Luiz,
>>>>> Microsoft documents will explain that ordinary users should not log in
>>>>> as
>>>>> administrators.
>>>>> If you are administrator, you have absolute power over your machine.
>>>>> You can
>>>>> delete files, format drives and do other potentially dangerous things.
>>>>> Users should log in as ordinary users, nothing more.
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> "Luiz" <(E-Mail Removed)> wrote in message
>>>>> news:4A2BB49E-086D-42E4-89E7-(E-Mail Removed)...
>>>>> >I would like to know on windows xp based computers how to avoid
>>>>> >ordinary
>>>>> > users with local administrator privileges from deleting desktop
>>>>> > shortcuts
>>>>> > (ex. shortcut to word document) created by local administrators
>>>>> > (advanced
>>>>> > users).
>>>>> >
>>>>> > Palataform: Windows XP
>>>>> > Network: Novell
>>>>> > Drive C (location where Windows XP is installed): FAT32
>>>>> > Drive G (location where the files are located): Novell - The files
>>>>> > are
>>>>> > located in a folder with read only privileges.
>>>>> >
>>>>> > The ordinary users log on XP workstations with administrator
>>>>> > privileges.
>>>>> >
>>>>> > Is there a Microsoft document explaining how to do this?
>>>>> >
>>>>> > Thanks in advance,
>>>>> >
>>>>> >
>>>>>
>>>>>
>>>>>
>>>
>>>

>>
>>

>
>



 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Having a problem with local security policies/software restriction policies resetting menaztricks Windows XP Security 0 13th Sep 2007 05:03 PM
WinXP desktop Security via policies Kevin R. Garand Windows XP Security 7 5th Jan 2007 05:17 PM
Wireless Only Desktop - Network Starts too late and AD Computer Policies Don't Apply Kenny Windows XP Setup 0 8th Nov 2005 01:27 PM
Why would user policies be applied but not computer policies? Kelvin Beaton Microsoft Windows 2000 Group Policy 2 23rd Aug 2004 02:36 PM
Active Desktop and Group Policies John Microsoft Windows 2000 Active Directory 1 20th May 2004 09:13 PM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 02:29 PM.