Re: KIOSK MODE?
From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 09/26/05
- Next message: Johnny Chow: "Computer does not remove from domain"
- Previous message: Tom Che [MSFT]: "RE: KIOSK MODE?"
- In reply to: Tom Che [MSFT]: "RE: KIOSK MODE?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 26 Sep 2005 06:44:00 -0500
Yes their is no SRP in Windows 2000. What the user could try is to use the
Group Policy setting under user configuration/administrative
templates/system - run only allowed Windows applications after reading the
full explanation of the setting and adding iexplorer.exe to that list.
However the user could be able to run any executable that is named
iexplorer.exe on the computer - authorized or not though this is still a
workable solution particularly if the user is not a local administrator or
power user and other restrictions are enabled such as not being able to run
the command prompt and using ntfs restrictions. --- Steve
"Tom Che [MSFT]" <v-tomche@online.microsoft.com> wrote in message
news:Wgb%235kmwFHA.768@TK2MSFTNGXA01.phx.gbl...
> Hi Zuke,
>
> Thanks for posting here. Sorry for my delayed response due to the
> weekend.
>
> From your post, my understanding of this issue is: You would like to know
> how to restrict a PC to run only one program in Win2K AD. If this is not
> correct, please feel free to let me know.
>
> Based on my experience, it might be difficult to perform this restriction
> in Win2K AD without third-party specific software. But there are Software
> Restriction Policies in Win2K3. For more information, please see:
>
> Software Restriction Policies
> <http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Serv
> erHelp/9c25d487-eb0b-4e2d-a5f7-89b2686d6a69.mspx>
>
> However, in Win2K AD, you may try to use Group Policy to lock down the
> desktop (just remain one shortcut for your application), remove unneeded
> items from Start Menu, hide hard drives and so on. And then, the user may
> not run other applications if he is not an expert and has insufficient
> privileges. For more information about how to do these policies, you may
> refer to the following Microsoft web site:
>
> Windows 2000 Group Policy Reference
> http://msdn.microsoft.com/library/en-us/gp/default.asp
>
> Hope this helps!
>
> Have a nice day!
>
> -------------------------------------------------------
> Please note that the newsgroups are staffed weekdays by Microsoft Support
> professionals to answer your non-urgent, break/fix systems and
> applications
> questions. Our goal is to provide 24 hour response to all questions.
>
> If this response time does not meet your needs, please contact Customer
> Service and Support (CSS) for more immediate assistance. For more
> information on available CSS services, please click here:
> http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone#faq607
>
>
> If you are outside the United States, please visit our International
> Support page: http://support.microsoft.com/common/international.aspx
> -------------------------------------------------------
>
> Sincerely,
> Tom Che
> Microsoft Online Partner Support
> Get Secure! - www.microsoft.com/security
>
> =====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> =====================================================
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
> --------------------
>>From: "zuke" <lgilmore@NO_SPAMrainbowgrocery.net>
>>Subject: KIOSK MODE?
>>Date: Fri, 23 Sep 2005 11:37:19 -0700
>>Lines: 4
>>X-Priority: 3
>>X-MSMail-Priority: Normal
>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>X-RFC2646: Format=Flowed; Original
>>Message-ID: <#7OZV3GwFHA.460@TK2MSFTNGP15.phx.gbl>
>>Newsgroups: microsoft.public.win2000.security
>>NNTP-Posting-Host: w160.z064002063.sjc-ca.dsl.cnc.net 64.2.63.160
>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP15.phx.gbl
>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.win2000.security:15293
>>X-Tomcat-NG: microsoft.public.win2000.security
>>
>>In a W2K AD network, can a PC be hooked up in a "kiosk mode" such that
> only
>>one application can be used?
>>
>>
>>
>
- Next message: Johnny Chow: "Computer does not remove from domain"
- Previous message: Tom Che [MSFT]: "RE: KIOSK MODE?"
- In reply to: Tom Che [MSFT]: "RE: KIOSK MODE?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
