how can i limit accounts to extreme's..??

Gary Pandher

OSNN Senior Addict
Joined
Mar 9, 2004
Messages
884
hey guys
question bout limitin what users can n cant do in their accounts
im the admin on the cpu
n the rest are just limited accounts
buh i'd like to set more limits
ex: no installin programs, no msn yahoo or any chat clients n things like that..anyone know how i cud disable all these in an account as well as make sure they wont be able to get them back on?

They are newbie users, but they know enough to dload the files and install em back on n everything (msn)
 

Sazar

F@H - Is it in you?
Staff member
Political User
Joined
Apr 12, 2002
Messages
14,905
I'm sure someone will post... I myself am awaiting an answer to this :D
 

NetRyder

Tech Junkie
Joined
Apr 19, 2002
Messages
13,256
The Group Policy Editor in XP Pro should allow you to do most, if not all of this.
Start>Run>gpedit.msc

So for example, to prevent users from running certain applications, you would go to User Configuration>Administrative Templates>System and modify the "Don't Run Specified Windows Applications" option. You could basically use this to create a list of instant messengers, chat clients etc that the user account is not allowed to run.

There are lots of other options in there. Look around, and I'm sure you'll find whatever else you're looking for. Each option shows you a pretty detailed explanation of what it does, and how to use it, so it shouldn't be very difficult to figure it out either. If you need help with a certain option etc, feel free to post your question.
Hope that helps
 

Gary Pandher

OSNN Senior Addict
Joined
Mar 9, 2004
Messages
884
mmmmm
jus wondering
will it disable the option for all users?
i only want it disabled for every other user
except for the admin account which is mine.. :confused:
 

NetRyder

Tech Junkie
Joined
Apr 19, 2002
Messages
13,256
Changes made to the "Computer Configuration" section affect all users on the machine. Since the group policy editor is intended mainly for machines that are on a domain, you need to tweak it a little bit for your particular situation. I forgot to mention that in my earlier post.

What you basically do is make changes to the "User Configuration" section only. However, this will apply to all accounts on your machine. The tweak basically excludes certain users from the policies using NTFS security permissions. It can be a little tricky, so be sure you don't make any drastic changes the first time you try it. For example, just prevent access to Messenger or something like that. If all goes well, and your account can still use everything, go ahead with the rest of the policies.

This page should show you how to get the tweak in place:
http://www.theeldergeek.com/gp07.htm

 

DJ-phYre

To whom it may concern
Joined
Jun 22, 2002
Messages
135
You can do it for specific users. We use this in our schools on Windows 2000. There is a way around getting it to work. I work at the school board during the summer as a computer tech, and this is what I did at every school. It basically involves setting the permissions on the group policy folder so that the Administrator can't read them, and therefore the administrator is unaffected. I am fixing to leave for school, I will check and see what the exact permissions are for these, and I will get back to you later. But I know it can be done, because we have done it! ;)
 

NetRyder

Tech Junkie
Joined
Apr 19, 2002
Messages
13,256
DJ-phYre said:
It basically involves setting the permissions on the group policy folder so that the Administrator can't read them, and therefore the administrator is unaffected.
The above link shows you how to do exactly that.
 

DJ-phYre

To whom it may concern
Joined
Jun 22, 2002
Messages
135
NetRyder said:
The above link shows you how to do exactly that.
I was in a hurry, almost late for school... didn't have time to look at the link... and o yeah... props to you :)
 

Gary Pandher

OSNN Senior Addict
Joined
Mar 9, 2004
Messages
884
been trying this out for a couple dayz
and changing things around trying to do what it says in that link
but when i open C:\Windows\System32\GroupPolicy
in that window there is a General, Sharing, and Customize tab..there isn't any Security tab..anyone know what i have to do?
 

Members online

No members online now.

Latest profile posts

Electronic Punk wrote on Sazar's profile.
Where are you buddy? :(
Perris Calderon wrote on Electronic Punk's profile.
Hey ep!

All good with me, applying for microsoft mvp right now, should have done this a while ago.

Notifications don't work, I only found your response by comming back to hunt up some threads, if you want, give me your email address so we can keep in touch easier, mine is perriscalderon at gmail
Perris Calderon wrote on Electronic Punk's profile.
Ep, glad to see you come back and tidy up...did want to ask a one day favor, I want to enhance my resume , was hoping you could make me administrator for a day, if so, take me right off since I won't be here to do anything, and don't know the slightest about the board, but it would be nice putting "served administrator osnn", if can do, THANKS

Been running around Quora lately, luv it there https://tinyurl.com/ycpxl
Electronic Punk wrote on Perris Calderon's profile.
All good still mate?

Forum statistics

Threads
61,978
Messages
673,285
Members
89,064
Latest member
Plesuvius