shakey said:
I just discovered that in my kids limited account they can go to start>all
programs and run any uninstallers that might be there. Seems they can also
run other programs I wouldn't appreciate such as Quicken. This could be
disastrous.
Help on how to severely limit their rights?
I guess I do not understand limited accounts, I thought they could only
access programs after the administrator gave permission. Obviously I am
wrong. Where can I read about this subject?
TIA
Mel
If you are using XP pro, try the GPO:
gpedit.msc click [OK]
On the Group Policy locate these:
[&] User Configuration
[+]Software Settings
[+]Windows Settings
[-]Administrative Templates
[+]NetMeeting
[-]Internet Explorer
[-] Security Feature
Restrict file download = Make sure the right Privileges are
implemented.
[&]Application Compatibility
[&]Attachment Manager
[+]Windows Explorer
[-]Microsoft Management Console
[-] Restricted/Permitted snap-in extensions
[*]Extension snap-ins
[-]Group Policy
[*] Group Ploicy = look in the Right Pane/Window and you will see
this:
Software Installation (computers) and
Software Installation (Users) make sure these two configured correctly.
The same with this
[*] Resultant Set of Policy snap-ins extensions = look in the Right
Pane/Window and you will see this:
Software Installation (computers) and
Software Installation (Users) make sure these two not Configured by
double click each of them
and select the radio Button to enable them and set the Permission.
[+] Terminal Services
[*] Windows Installer = look in the Right Pane/Window for this setting:
make sure the permission
Configured there.
Also look for programs permission you can set access permission for some
program to none if they are limited and you are doing this by Admin Rights.
Step-by-Step Guide to Understanding the Group Policy Feature Se
http://www.microsoft.com/technet/pr...ectory/activedirectory/stepbystep/gpfeat.mspx
Securing Windows XP Professional in a Peer-to-Peer Networking Environment
http://www.microsoft.com/smallbusiness/support/articles/sec_winxp_pro_p2p.mspx
HTH.
nass
