Re: locking down XP with NTFS permissions

From: Chris Burge (csburge@mvn.net)
Date: 11/06/02 

From: "Chris Burge" <csburge@mvn.net>
Date: Wed, 6 Nov 2002 09:45:36 -0800

I need to hide the control panel from everyone but the
administrator . I tried GP but it hid it from admin also .
Can you help with this
>-----Original Message-----
>Group Policy objects are designed to do this. However,
GPOs are applied
>to all users in all groups, admins included. In addition
to NTFS
>permissions, you might use the registry keys associated
with GPOs
>instead of the GPO itself to impose some additional
restrictions on the
>user interface on a per-user basis.
>
>In short, you have permissions that can apply to groups
and policy keys
>that can apply to individual accounts, as well as policy
that is
>machine-wide.
>
>--
>Kent W. England, MS MVP for Windows XP
>(Please respond only in the newsgroup)
>
>
>"Al" <smithal@hotmail.com> wrote
>in message news:daa101c28550$cc9219c0
$3bef2ecf@TKMSFTNGXA10...
>
>> I'm trying to find a TID document which recommends the
>> best way how to lock down the XP Professional Desktop
with
>> NTFS permissions.
>>
>> For example, I don't want my users to use nslookup.exe,
>> system restore etc..I believe ZAK for NT covered of this
>> but I can't find anything for XP..
>>
>> And help would be great
>>
>
>.
>

Relevant Pages

  • Re: locking down XP with NTFS permissions
    ... Group Policy objects are designed to do this. ... In addition to NTFS ... you might use the registry keys associated with GPOs ... you have permissions that can apply to groups and policy keys ...
    (microsoft.public.windowsxp.security_admin)
  • Re: BITS 2.0 Install Fails - Permission problem
    ... It sounds as though a domain policy is set that trumps your local policy. ... don't think that even a domain admin can override it by editing the local ... > And I get the same problem: Error Code: 8007F004 when installing the BITS ... >> Please verify that your account has the following required permissions. ...
    (microsoft.public.windowsupdate)
  • Re: Server Operator Role
    ... >domain admin and then keep in mind that a domain admin ... >Joe Richards Microsoft MVP Windows Server Directory ... >> have a number of users with Domain Admin permissions. ... the group cannot run the TS Policy. ...
    (microsoft.public.win2000.active_directory)
  • Re: Group Policy question
    ... They best are to create two or more GPOs then. ... Common Policy Setting ... > I agree with admin settings in part. ...
    (microsoft.public.win2000.active_directory)
  • Re: Anmeldescript als Admin
    ... hmmm, ich kenne mich mit den GPOs nicht so aus aber ich gehe, ohne es ... die OU-Admins in deren Policy etwas ... Also kann der Domänen Admin dies doch unterbinden, ...
    (microsoft.public.de.german.windows.server.general)
Loading