Windows restriction

[Martin]

Hey,
I'm working on a computer and need to know how to do some thing on it to protect it from people that don't know any better. So could someone please tell me how to do some of the following things (Feel free to throw in anything you think would be useful and please include the program or name like visual basic or DOS or something).

1. Hide itself (so they can't stop it)

2. Disable right clicking

3. Restricted time on account (ex. 1 hour every day before logging off)

4. Stop from running executable files (and how to let them run while others don't along with which ones to allow so that the computer can still run)

5. Keep the account from running cmd (start > run > cmd)

6. Preferably Free

7. If possible works on vista

O ya I'd like to have the program file have to run every time the account logs on so nothing permanent please and it has to be runable on a standard user account so that it can run every time they log on.

Thanks (I may have more later)

 

[Alister]

Hey,
I'm working on a computer and need to know how to do some thing on it to
protect it from people that don't know any better. So could someone
please tell me how to do some of the following things (Feel free to
throw in anything you think would be useful and please include the
program or name like visual basic or DOS or something).

1. Hide itself (so they can't stop it)

2. Disable right clicking

3. Restricted time on account (ex. 1 hour every day before logging off)

4. Stop from running executable files (and how to let them run while
others don't along with which ones to allow so that the computer can
still run)

5. Keep the account from running cmd (start > run > cmd)

6. Preferably Free

7. If possible works on vista

O ya I'd like to have the program file have to run every time the
account logs on so nothing permanent please and it has to be runable on
a standard user account so that it can run every time they log on.

Thanks (I may have more later)

You need to investigate the possibilities of the local group policy.

You can edit this using gpedit.msc (type that into the run box on the
start menu).

Be warned, you could REALLY screw up windows if you're not careful - I
suggest you google it very thoroughly first.

Alister.

 

[Alister]

the >> start menu).

Is gpedit.msc vista comptible because i tried it and it didn't work on
my vista computer (Yes I ran as administrator)?

gpedit.msc isn't available in Home Basic and Home Premium so if you are
running one of those versions, take a look at this Excel spreadsheet by
Microsoft, which shows you how to edit the registry to get the same effect:

http://www.microsoft.com/downloads/...9b-3328-4350-ade1-c0d9289f09ef&DisplayLang=en

Alister

(please reply to the newsgroup)

 

[smlunatick]

 > Martin wrote:
 >>Alister wrote:

 >> You need to investigate the possibilities of the local group policy..
 >>
 >> You can edit this using gpedit.msc (type that into the run box on
the >> start menu).

 >Is gpedit.msc vista comptible because i tried it and it didn't work on
 >my vista computer (Yes I ran as administrator)?

gpedit.msc isn't available in Home Basic and Home Premium so if you are
running one of those versions, take a look at this Excel spreadsheet by
Microsoft, which shows you how to edit the registry to get the same effect:

http://www.microsoft.com/downloads/details.aspx?FamilyID=41dc179b-332....

Alister

(please reply to the newsgroup)

Please note that this is a group for Windows XP. There are only four
levels of XP: Home, Pro, Media Centre Edition and Tablet.

Windows Vista would be the version that would have Basic and Premium
editions.

 

[Tim Meddick]

Hi Alister,
where to start? Well I'll give you one tip. To stop
CMD.EXE from running you have to "run as" another user regedit.exe as
administrator and find that user you want not to run cmd.exe within the key
HKEY_USERS Then find the key:
S-1-???...???\Software\Policies\Microsoft\Windows\System and create a new
DWord value under it and call it DisableCMD and give it the value 2. That
disables cmd.exe for that user. It's a little tricky locating the right key
under hkey_users but after that it's straight forward. I don't know
anything about Group Policies except for setting them for the current user
[me] but am at a loss as how to define a policy (using Group Policy Editor)
to then be applied to another user. So this is the way I do it for the
[very] few computers that I have to manage. You get used to it.

 

[Alister]

Please note that this is a group for Windows XP. There are only four
levels of XP: Home, Pro, Media Centre Edition and Tablet.

Windows Vista would be the version that would have Basic and Premium
editions.

Quite correct, but since the OP mentioned in his second post that he was
running Vista I preferred to give him a helpful answer.
The original advice still stands for XP though, If you want to restrict
users in the way the OP describes, use Group Policy.

Alister

 

[Alister]

Hi Alister,
where to start? Well I'll give you one tip. To stop
CMD.EXE from running you have to "run as" another user regedit.exe as
administrator and find that user you want not to run cmd.exe within the key
HKEY_USERS Then find the key:
S-1-???...???\Software\Policies\Microsoft\Windows\System and create a new
DWord value under it and call it DisableCMD and give it the value 2. That
disables cmd.exe for that user. It's a little tricky locating the right key
under hkey_users but after that it's straight forward. I don't know
anything about Group Policies except for setting them for the current user
[me] but am at a loss as how to define a policy (using Group Policy Editor)
to then be applied to another user. So this is the way I do it for the
[very] few computers that I have to manage. You get used to it.

Thanks Tim, but Martin was the OP

Alister