Re: Win 2k Security Questions

From: Anthony Yates (anthonyDINGyates_at_airDONGdesk.com)
Date: 11/26/04 

Date: Fri, 26 Nov 2004 12:20:01 -0000

This sounds like a Kiosk-type application. Have a look at the template MS
policy for Kiosk computers. You could also explore the Guest account. Trying
to configure this manually sounds like a lot of work,
Anthony

"Robert Paris" <rpjava@hotmail.com> wrote in message
news:OlhqO2p0EHA.3408@tk2msftngp13.phx.gbl...
> I am looking for how I can do the following on Win2K:
>
> 1. Disable a User's ability to write to/edit the registry
> (Actually disable for all but Administrator)
>
> 2. Disable user's ability to write files to all but one folder
>
> 3. Disable user's ability to execute any program except for a few that I
> specify
> (And can I log attempts to run/execute programs?)
>
> 4. In disabling cmd.exe, can I set up only two programs to run (on
startup)
> in command prompts (with RunAs service) - they're java programs - and
still
> keep all other java programs and the user from being able to do anything
in
> command prompt?
>
> Answers to any of these questions would be greatly appreciated. Any
pointers
> to further resources would be great too! Thanks!
>
>

Relevant Pages

  • Real basic security question.
    ... New install of XP Pro by a 20+ year programmer that's more or less a pc ... on the Guest account and what I'd like for that Guest account. ... No ability to "Browse" anywhere from within ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Multicast channels and their guides?
    ... As I stated in my post MS has no intentions of changing their policy since they see no reson why they should provide the ability to support any sub channels that a network broadcaster may be providing in order to assist those with old TVs at the expense of having hundreds of entries in their EPG for users in major metropolitan areas. ...
    (microsoft.public.windows.mediacenter)
  • Re: OT The surrender speech
    ... An acceptable policy platform, and the ... ability to deliver it. ... plan survives contact with the enemy"). ...
    (talk.origins)
  • Limiting access to only 1 program for another user
    ... I use XP home with my own admin logon. ... user that I want to allow only the ability to run 1 ... The Guest account and a new ... account with limited access are still too flimsy. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Can an Assert issued following a Deny override it?
    ... But what I would like to know is how to specifically restrict an assembly's ... ability to use the Assert method. ... I have used the above tools to do some basic security configuration things - ... It can be denied via policy as you would any other ...
    (microsoft.public.dotnet.security)