Windows 2K Security Questions

From: Robert Paris (rpjava_at_hotmail.com)
Date: 11/25/04 

Date: Wed, 24 Nov 2004 22:12:07 -0500

I am looking for how I can do the following on Win2K:

1. Disable a User's ability to write to/edit the registry
   (Actually disable for all but Administrator)

2. Disable user's ability to write files to all but one folder

3. Disable user's ability to execute any program except for a few that I
specify
   (And can I log attempts to run/execute programs?)

4. In disabling cmd.exe, can I set up only two programs to run (on startup)
in command prompts (with RunAs service) - they're java programs - and still
keep all other java programs and the user from being able to do anything in
command prompt?

Answers to any of these questions would be greatly appreciated. Any pointers
to further resources would be great too! Thanks!

Relevant Pages

  • Command Prompt Security Question
    ... In disabling cmd.exe, can I set up only two programs to run (on startup) ... in command prompts - they're java programs - and still ...
    (microsoft.public.win2000.cmdprompt.admin)
  • Re: Quantum Mechanics according to Mark Mccutcheon
    ... In the presence of powerful skeptics. ... > disturbing waves that may disturb the demonstration. ... > psychics can temporarily lose their ability. ... > for how the psi disabling may occur (via out of time ...
    (sci.physics)
  • Re: Windows XP Pro Taskmgr.exe
    ... also like to remove the ability to copy taskmgr.exe from another ... Disabling task manager isn't the issue here - that's a bandaid (and it's one ... I wouldn't want to apply as Task Manager is really pretty damned useful). ... accounts or unauthorized local accounts should be in the local ...
    (microsoft.public.windows.server.sbs)
  • Re: Embedding Simple MFC GUI app into website
    ... The real trick is to reduce the attack profile. ... Internet and all my other ... I have disabled the ability to ... Most of what I'm disabling exists not because of "bugs" that cause ...
    (microsoft.public.vc.mfc)
  • Win 2k Security Questions
    ... Disable user's ability to write files to all but one folder ... In disabling cmd.exe, can I set up only two programs to run ... in command prompts - they're java programs - and still ...
    (microsoft.public.win2000.general)