Re: Prevent to use Network Neighbourhood,Clock,Printer,etc.

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 04/13/05


Date: Wed, 13 Apr 2005 12:32:41 -0500

Hopefully your users are "restricted users" in the sense that they are
regular users and not local administrators or power users that will make it
next to impossible to restrict if the user is determined, especially on a
Windows 2000 workstation. Having said that you can restrict or "hide" much
from users using Group Policy. In particular look in the settings under user
configuration/administrative templates for all the various options such as
in Windows Explorer and desktop. The user accounts must be within the scope
of influence of the Group Policy if you configure it at other than domain
level which often makes sense as possibly you do not want these restrictions
to apply to all domain users. Changing system time is a user rights which
you can manage in the appropriate Group Policy under computer
configuration/Windows settings/security settings/local policies/user rights
and is a computer specific setting. --- Steve

"modakindia" <modakindia@discussions.microsoft.com> wrote in message
news:C38CDD30-DD99-42BC-A8E6-8E571ABBABA2@microsoft.com...
> Our comptuers are connected with a Windows 2000 Server with DHCP DNS.
> Server name is rsm.com
> I would like to apply a policy over the client machines to prevent some
> function/operation like follows:
> 1. User could not be able to open/Edit Network Neighbourhood.
> 2. User could not be able to change Timing of System Clock.
> 3. User could not be able to change any Printer settings.
> and other features like "Restricted Users' of the client.
>
> Could you tell me please what should I do?
>
> Regards
>



Relevant Pages

  • Re: Windows clock
    ... For XP Pro, this can be restricted via the Group Policy Editor. ... Go to Computer Configuration, Windows Settings, Security Settings, Local Policies, User Rights Assignment. ... you would have to restrict access to the TIMEDATE.CPL application. ...
    (microsoft.public.windowsxp.newusers)
  • Re: Help with Policys
    ... > If these users logon to Windows XP Pro computers then you can use Software ... > Organizational Unit with it's own Group Policy linked to it and configure ... I would like to restrict this group from being able to ... >>install programs on the workstation, ...
    (microsoft.public.windows.group_policy)
  • Re: Re: Redirecting Word docs in group policy
    ... >>Hi, That is a good idea, but we restrict the C: ... I use Folder Redirection in Group Policy to "redirect" ... > This only works for Windows 2000 or Windows XP clients in an Active ... > I found this was the best way to make sure my users were saving on the ...
    (microsoft.public.win2000.group_policy)
  • Re: Policy
    ... > You can use Group Policy to further restrict access. ... > can use the Windows applications restrictions in user ... > enabling] to restrict users from running or installing unauthorized ...
    (microsoft.public.windows.server.security)
  • Re: Policy
    ... I trying to do the same thing Sam is but in a NT 4.0 workstation ... > You can use Group Policy to further restrict access. ... For Windows 2000 computers you ...
    (microsoft.public.windows.server.security)