policies

[Guest]

i have a small netwofk with 8 computers all running win xp pro, (WORK GORUP)
i want local users on each computer to see nothing but ONLY internet
explorer on the screen, and when they hit the start button they should only
see DOCUMENTS.

But i want ADMINISTRATOR to able to see everything as usual, how do i do
that ?

Am thankful for any that i may get.

 

[Steven L Umbach]

Your best bet is to look at the free Shared Computer Toolkit that requires
SP2. You can really lockdown restricted accounts with it though I don't know
if you can get it quite to the point that you want. You can also use local
Group Policy via gpedit.msc to restrict users though by default restrictions
will apply to all users on the computer but a common hack is to give
administrators deny read permissions to the
\Windows\system32\grouppolicy\users folder. You will see a plethora of
options to restrict users under user configuration /administrative
templates. If you do not want those computers ever to be able to access
shares on the network then disable Client for Microsoft Networks on
hem. --- Steve

http://www.microsoft.com/windowsxp/sharedaccess/overview.mspx --- Shared
Computer Toolkit