GPEdit.msc

[Guest]

I have a problem user/PC. The bad history goes back the three years I've been
tech support for the department. She instists on installing toys that end up
trashing her PC.
Her manager "pretends" to be on my side but won't do anything.
The user may not be the culprit - it may be a rogue tech from IT Department.
Now I'm building her 4th PC in two years. This user has wasted more time
than my other 80 users combined (although she occassionally has competition).
The user's job requires that she be a local administrator, otherwise her
applications don't work all the way.
I want to restrict applications from installing, unless logged on with the
built-in administrator account. If this isn't a good idea, then I'm willing
to break all installs and go through the trouble of enabling
installs/installing/disabling again.

Is GPEdit.msc the best way to lock her computer down?
The only way?
Anyone have other suggestions?

She likes going to the Internet and downloading screensavers, or bringing
them in on removable media.
She likes installing illegal software.
Her password is WEAK!
Hostile scripts have damaged her and could've come from anywhere!

 

[Carey Frisch [MVP]]

How To Use the Group Policy Editor to Manage Local Computer Policy in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;307882&Product=winxp

Windows XP Security Checklist
http://www.labmice.net/articles/winxpsecuritychecklist.htm

Doug's Windows XP Security Console
http://www.dougknox.com/xp/utils/xp_securityconsole.htm

[Courtesy of MS-MVP Doug Knox]

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect Your PC!
http://www.microsoft.com/athome/security/protect/default.aspx

--------------------------------------------------------------------------------------

:

| I have a problem user/PC. The bad history goes back the three years I've been
| tech support for the department. She instists on installing toys that end up
| trashing her PC.
| Her manager "pretends" to be on my side but won't do anything.
| The user may not be the culprit - it may be a rogue tech from IT Department.
| Now I'm building her 4th PC in two years. This user has wasted more time
| than my other 80 users combined (although she occassionally has competition).
| The user's job requires that she be a local administrator, otherwise her
| applications don't work all the way.
| I want to restrict applications from installing, unless logged on with the
| built-in administrator account. If this isn't a good idea, then I'm willing
| to break all installs and go through the trouble of enabling
| installs/installing/disabling again.
|
| Is GPEdit.msc the best way to lock her computer down?
| The only way?
| Anyone have other suggestions?
|
| She likes going to the Internet and downloading screensavers, or bringing
| them in on removable media.
| She likes installing illegal software.
| Her password is WEAK!
| Hostile scripts have damaged her and could've come from anywhere!

 

[Nero]

One thing to say regarding that.
IF you do NOT have XP Pro then you don't have and cannot use GPEdit.msc.
It is not part of XP home, it cannot be used with XP home, it will not run
in XP home.
No one seems to even bother telling anyone it does not exist in XP home.

 

[Guest]

Thanks. The Labmice link is particularly useful. Short & to-the-point.
I have a Biometric device on the shelf and may consider using it, but this
won't stop a tech from remote network access.
Also, taking away controlPanel tabs won't stop an executable from installing
and altering things.
Where there's a will, there's a way. I can't keep administrators out of her
PC.
There may be very little I can do but find employment elsewhere.
Thank you ofr the help.

 

[Jerry]

Listen wing-nut ... I am NOT an expert on XP ... k? Ding dong!!!

 

[Nero]

People should not go round posting about anything XP without assuming it is
common to both versions.
Too many websites go on about it and do not stop to check/find out if it is
in both.