Re: limit access

From: tome (pinevalleytome@yahoo.com)
Date: 12/23/02


From: "tome" <pinevalleytome@yahoo.com>
Date: Sun, 22 Dec 2002 17:08:36 -0800


maybe it's just me, but to keep the administrators from
seeing this infor seems kinda stupid. don't get me wrong,
the info is still helpful and i'm greatful for the
responses, but it just seems that for the administrator to
change these settings (display properties or IE setting)
he must get back into the group policies and reenable them
before he can tweak them. it just seems like microsoft
would have found a better way to do this without having to
make more work for the admins. thanks nonetheless.

12-22-02
2006 EST
tome

>-----Original Message-----
>Also if you are implementing such group policies, first
make sure the users
>are not in the local Administrators group, since
Administrators can undo
>anything another Administrator has done.
>
>"neo [mvp outlook]" <neo@mvps.org> wrote in message
>news:OVkeBjVqCHA.868@TK2MSFTNGP12...
>> They are using a group policy. If you would like to
see some of the
>> choices, open a command prompt and type "start
gpedit.msc". (To hide the
>> control panel, you would go to User Configuration |
Administrative
>Templates
>> | Control Panel. There should be an option on the
right to hide it.)
>Just
>> make sure that you take great care in apply a policy
against your home
>> machine since it will apply against all users including
the local
>> administrator account.)
>>
>>
>> "tome" <pinevalleytome@yahoo.com> wrote in message
>> news:034101c2a924$e5f439a0$8af82ecf@TK2MSFTNGXA03...
>> > i administer a few win2k machines, but nothing on a
big
>> > scale. however, my work can keep people from seeing
>> > things on the start menu like "Run" & "Search."
>> > furthermore, they can keep us from seeing drives
like "C"
>> > and cd drives when we go into "My Computer."
the "Control
>> > Panel" has be disabled as well as "Display
Properties" and
>> > IE Properties." how do they do it!? this knowledge
would
>> > come in handy.
>> >
>> > 12-21-02
>> > 1411 EST
>> > tome
>> >
>> >
>>
>>
>
>
>---
>Outgoing mail is certified Virus Free.
>Checked by AVG anti-virus system (http://www.grisoft.com).
>Version: 6.0.423 / Virus Database: 238 - Release Date:
11/25/2002
>
>
>.
>



Relevant Pages

  • Re: Group Policy Questions for Library
    ... >directions in Q293655 to apply Group Policies to all but Administrators. ... >intuitively seems to do nothing to immunize the Admin from the policies. ... >drive' also prevented CDRW software from functioning. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: limit access
    ... are not in the local Administrators group, ... > control panel, you would go to User Configuration | Administrative ... >> i administer a few win2k machines, ...
    (microsoft.public.win2000.security)
  • Re: I asked this before, Group Policies
    ... > I'm trying to use group policies, ... > restricting Administrators. ... > remove control panel ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Users can login, but not logout
    ... Group policies in use? ... Can administrators do this ... > login but, but the logout does not work with either ctrl- ...
    (microsoft.public.win2000.security)
  • Re: cannot access any of my control panel.
    ... "administrators" group if you want full access to Control Panel. ... Be sure to update AdAware before scanning ... -- online security check and scan. ...
    (microsoft.public.win2000.security)