Hi Doug,
Suggestions and added information:
Restrict User Logon Hours
For Pro: Click Start, Run and enter GPEDIT.MSC Go to Computer
Configuration, Windows Settings, Security Settings, Local Policies, Security
Options. In the right pane, locate the entry for Network Security: Force
logoff when logon hours expire.
Examples of setting the logon hours would be: You can set them for 24 hours
Or go to Start/Run/CMD and type in: (use as an example and modify)
net user kelly /time:M-F,08:00-17:00
net user kelly /time:M-F,8am-5pm
net user kelly /time:M,4am-5pm;T,1pm-3pm;W-F,8:00-17:00
To cancel and/or clear: Go to Start/Run/CMD and type in: (Use as an
example) net user Kelly /time:all
Control how much time your kids spend on the computer!
http://www.noonsoon.com/infodocb.htm
Start/Run/GPEDIT/User restrictions. These things can only be changed from
Admin accounts and apply to all user profiles. GPEDIT.MSC is not available
in the Home Edition of Windows XP.
1. Go to Windows Explorer/Document & Settings
2. All Users". Click on Start Menu/Programs and locate the short cut to that
program.
3. Do the same under "specific username" (the username that you want to
anable to individually use the program.
4. Now "Copy" the shortcut from All Users/Start Menu/Programs to
"username"/Start Menu/Programs.
5. Once the copy process is over, delete the shortcut from All Users (this
is just a safety precaution, you can also right click/drag&drop/move).
Doug's Security Console
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
Restrict Users from Running Specific Applications
http://www.kellys-korner-xp.com/xp_a.htm#xp_restrict
SP2 only: Disable Internet Access. This can be scripted and added to the
Task Scheduler.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
NoWebServices Dword 1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
NoInternetOpenWith Dword 1
HKEY_CURRENT_USER\Software\Policies\Microsoft\InternetManagement
RestrictCommunication Dword 1