Restrict the ability to change the computer name in Windows XP SP2

G

Guest

Hi

I need to know how to remove the ability to change the local workstations
computer name? I cant find anything for this in the Group Policy...Is there a
reg key or something?

Possibly to disable the properties of My Network Places?

HELP Please.....
 
G

Guest

You can disable the Control Panel, which, i guess, simultaneously disables
the My Computer properties. And, also, you can disable My Network Places and
some other settings folders.
To disable Control Panel:
HKEY_LOCAL_MACHINE(or better
HKEY_CURRENT_USER)\Software\Windows\CurrentVersion\Policies\Explorer\NoControlPanel
(DWord value). Set this to 1. To disable settings folders, add parameter
named NoSetFolders of the DWORD type in the same place and assign it's value
also to 1.
Or: download Registry Guide from www.winguides.com. i'm not sure whether
i've downloaded it from there, but it's there and it's free.Good Luck!
 
L

Lanwench [MVP - Exchange]

Turnby said:
Hi

I need to know how to remove the ability to change the local
workstations computer name? I cant find anything for this in the
Group Policy...Is there a reg key or something?

Possibly to disable the properties of My Network Places?

HELP Please.....

In addition to the other reply:
A non-administrator can't do this anyway....and end users shouldn't have
local administrator rights.
 
B

Bruce Chambers

Turnby said:
Hi

I need to know how to remove the ability to change the local workstations
computer name? I cant find anything for this in the Group Policy...Is there a
reg key or something?

Possibly to disable the properties of My Network Places?

HELP Please.....


Just make sure that the computer's users don't have administrative
privileges.

--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH
 
L

Lanwench [MVP - Exchange]

Turnby said:
Why even bother replying to this when you dont know, or don't answer
the question!

Because:

a) this is a public newsgroup, not dedicated tech support you're paying for,
and you takes what you gets
b) the answer was pretty darn well provided for you by Siphiuel; hence my
"in addition to the other reply" preamble
and
c) I'm correct in that non-administrators cannot change the computer name,
and also correct in stating that that end users should not have anything
more than limited user rights under nearly any circumstances I can think of.

Does that answer your question?
 
G

Guest

With all due respect, my client company WANTS users to have local admin
rights, BUT wants to stop them from changing the ncomputer name. ..SO....is
there any way to do so? Or must my client remove the users from the local
admin, and then piece-meal back their local rights, like adding printers,
drivers, etc....?????

Surely in GPO Settings there is some way to control this.....And , no,
taking away the entire Control Panel is not a good suggestion.
 
R

Robert Moir

simpsongb said:
With all due respect, my client company WANTS users to have local
admin rights, BUT wants to stop them from changing the ncomputer
name. ..SO....is there any way to do so?

No fool-proof method no. I think somone has a poor understanding of what
"local administrator" means.
Or must my client remove the
users from the local admin, and then piece-meal back their local
rights, like adding printers, drivers, etc....?????

Surely in GPO Settings there is some way to control this.....And , no,
taking away the entire Control Panel is not a good suggestion.

No its not. Because that won't stop someone with local admin rights if they
really want to change things around that you don't want changed.

--
 
B

Bruce Chambers

simpsongb said:
With all due respect, my client company WANTS users to have local admin
rights, BUT wants to stop them from changing the ncomputer name. ..SO....is
there any way to do so?


No. If a user has local administrative privileges, he can do whatever
he likes with the computer. That's why administrative privileges are
normally assigned only to a very limited, trusted few individuals.

Or must my client remove the users from the local
admin, and then piece-meal back their local rights, like adding printers,
drivers, etc....?????

Have you tried assigning them Power User privileges? This should meet
such needs, under most circumstances. And yes, added privileges can be
granted to limited user accounts granting them full administrative
privileges. Just ask your IT department to configure the computers as
needed.




--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH
 
G

Guest

Bruce

Power Users would be interesting....my client trusts users at the
workstation level, but wants the computer names left unchanged....I'll have
to see if Power USers can modify the computer name.....
 
R

Robert Moir

simpsongb said:
Bruce

Power Users would be interesting....my client trusts users at the
workstation level, but wants the computer names left
unchanged....I'll have to see if Power USers can modify the computer
name.....

If they trust their users why not simply say "Don't change the computer
names!" to them?
 
B

Bruce Chambers

simpsongb said:
Bruce

Power Users would be interesting....my client trusts users at the
workstation level, but wants the computer names left unchanged....I'll have
to see if Power USers can modify the computer name.....


No, only Administrators can do this.

--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top