Re: Win 2k Security Questions

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 11/26/04 

Date: Fri, 26 Nov 2004 08:32:54 -0700

If you could change to XP/W2k3 this is a more approachable
set of objectives than it is on W2k. 

-- 
Roger Abell
Microsoft MVP (Windows  Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Robert Paris" <rpjava@hotmail.com> wrote in message
news:OlhqO2p0EHA.3408@tk2msftngp13.phx.gbl...
> I am looking for how I can do the following on Win2K:
>
> 1. Disable a User's ability to write to/edit the registry
>    (Actually disable for all but Administrator)
>
> 2. Disable user's ability to write files to all but one folder
>
> 3. Disable user's ability to execute any program except for a few that I
> specify
>    (And can I log attempts to run/execute programs?)
>
> 4. In disabling cmd.exe, can I set up only two programs to run (on
startup)
> in command prompts (with RunAs service) - they're java programs - and
still
> keep all other java programs and the user from being able to do anything
in
> command prompt?
>
> Answers to any of these questions would be greatly appreciated. Any
pointers
> to further resources would be great too! Thanks!
>
>

Relevant Pages

  • Re: Quantum Mechanics according to Mark Mccutcheon
    ... In the presence of powerful skeptics. ... > disturbing waves that may disturb the demonstration. ... > psychics can temporarily lose their ability. ... > for how the psi disabling may occur (via out of time ...
    (sci.physics)
  • Re: Windows XP Pro Taskmgr.exe
    ... also like to remove the ability to copy taskmgr.exe from another ... Disabling task manager isn't the issue here - that's a bandaid (and it's one ... I wouldn't want to apply as Task Manager is really pretty damned useful). ... accounts or unauthorized local accounts should be in the local ...
    (microsoft.public.windows.server.sbs)
  • Re: Embedding Simple MFC GUI app into website
    ... The real trick is to reduce the attack profile. ... Internet and all my other ... I have disabled the ability to ... Most of what I'm disabling exists not because of "bugs" that cause ...
    (microsoft.public.vc.mfc)
  • Re: Security Questions
    ... Try searching through the Group Policy Editor for options that suit your ... You may find a way to combine a few of your goals. ... Disable user's ability to write files to all but one folder ... In disabling cmd.exe, can I set up only two programs to run (on ...
    (microsoft.public.win2000.new_user)
  • Re: Norton Anti virus Disabling
    ... Please post the results back so we can figure out what worm is disabling ... Microsoft MVP - Windows Security ... >I seem to have a virus that is disabling Norton Anti- ...
    (microsoft.public.scripting.virus.discussion)