Re: Exacutable commands for Folder Options & Startup Menu Properties

From: Kent W. England [MVP] (kwe_at_mvps.org)
Date: 06/26/03 

Date: Wed, 25 Jun 2003 20:58:26 -0700

Disable control panels:
http://www.winguides.com/registry/display.php/543/
Start Menu and Taskbar:
http://www.winguides.com/registry/category.php/42/

Be sure to only use the HKEY_CURRENT_USER settings and apply these when
logged onto the children's accounts. Otherwise, you'll disable your own
capabilities. 

-- 
Kent W. England, Microsoft MVP for Windows
"Ira" <IraIDInsurance@hotmail.com> wrote in
message news:062e01c339fe$65f86580$a501280a@phx.gbl...
> I want to further child-proof my computer. A "Limited"
> account locks them out of some sensitive settings but not
> all.
>    Can someone help me find the Windows XP exacutable
> file/commands for the following four things? I figure
> their permissions can be changed so only people in
> the "Admin" group (& "Admin" accounts) can access them:
>         1)"Tools/Folder Options"
>         2)"Start Menu Properties"
>         3)"Taskbar Properties"(& add "Tools Bars")
>        And maybe:
>         4)"Control Panel"
>    I figure if I can find the exacutable file/command
> that opens "Tools/Folder Options" I can prevent other
> users on my computer from un-hiding files on the drive.
>    If I could find the exacutable file/command that is
> used when you right click on the start menu and open its
> properties I could lock out other users from un-hiding &
> using things like the "Run..." box and other links.
> Similar situation with "Taskbar Properties"(& add "Tools
> Bars")
>    And who knows what my kids could screw up when
> clicking around in the "Control Panel"
>    (MY SET UP BACKGROUND INFO: I'am running Windows XP
> Pro/IE6. I'am set up as an "Admin" account, everybody
> else has a "Limited" account. I 'am the only one in
> the "Admin" group, everybody else is in the "Users"
> group. Simple file sharing is un-checked for my NTFS
> drive. When I set up I set the permisssions on the whole
> drive to give "System" & "Admin" FULL access and "Users"
> a"Special Access"(FULL access minus Changing Permissions).
>     I did this so Norton Personal Firewall/Anti-Viruis &
> other programs would work with "Limited" accounts.
>     Then I went back and deleted the "Users" group access
> permissions from only certain file/program folders.)

Relevant Pages

  • Re: Incoming E-Mail - cant create contact in OU
    ... account out of local administrator to attempt to find any denied access. ... I then added full permissions to my user account on both of these keys, ... local admin rights to the server hosting incoming email. ... what permission I need to give the app pool locally to avoid this issue. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Incoming E-Mail - cant create contact in OU
    ... account out of local administrator to attempt to find any denied ... I then added full permissions to my user account on both of these keys, ... that's for every app pool you create for every new web app on the ... local admin rights to the server hosting incoming email. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Win2k - Account Operator not working properly
    ... You very likely have other ACL issues other than what was mentioned and I can point them out here for you for free or you can pay someone $200-500 an hour to come check it out. ... In order for that to result in inheritence protection it means the schema had to be modified. ... set the account in the GUI to inherit from its parents. ... Used the delegation wizard, on the top level OU, to assign the desired permissions. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Incoming E-Mail - cant create contact in OU
    ... account out of local administrator to attempt to find any denied access. ... I then added full permissions to my user account on both of these keys, ... local admin rights to the server hosting incoming email. ... what permission I need to give the app pool locally to avoid this issue. ...
    (microsoft.public.sharepoint.windowsservices)
  • Consider Windows XP File Security and Group Policies
    ... If you are running Windows XP and are using the NTFS file system, ... Account from being able to purge its history footprint files. ... Changing Folder permissions to Read-Execute instead of Full ... you globally apply Full Control for the Administrators group and the SYSTEM ...
    (microsoft.public.windowsxp.general)