Re: Creating Custom group for local XP Pro SP2 machine
From: Doug Knox MS-MVP (dknox_at_mvps.org)
Date: 08/20/04
- Next message: beav227: "RE: access is denied - driver"
- Previous message: Doug Knox MS-MVP: "Re: Reply to the policy editor"
- In reply to: Josh Mikow: "Re: Creating Custom group for local XP Pro SP2 machine"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 20 Aug 2004 08:40:39 -0400
E-mail me at support @ dougknox.com with the exact details of the problem you're having.
-- Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display Win 95/98/Me/XP Tweaks and Fixes http://www.dougknox.com -------------------------------- Per user Group Policy Restrictions for XP Home and XP Pro http://www.dougknox.com/xp/utils/xp_securityconsole.htm -------------------------------- Please reply only to the newsgroup so all may benefit. Unsolicited e-mail is not answered. "Josh Mikow" <jmikow@applebyco.com> wrote in message news:ee8e1EkhEHA.2916@TK2MSFTNGP12.phx.gbl... > Doug, > > I just tried using your Security Console to restrict access to the computer > for our user and I ended up securing myself from making more changes. How > can I get back to make changes to the settings of the current user? > > Josh > > > "Doug Knox MS-MVP" <dknox@mvps.org> wrote in message > news:%23G3hdHjhEHA.712@tk2msftngp13.phx.gbl... > There are tools such as Belarc Advisor, www.belarc.com and others. Some > examples are listed here. > > http://www.handyarchive.com/free/software-inventory/ > > None are free, though for Corporate use. Another method might be a logon > script that reads the uninstall information in the Registry, and reports any > "extra" software it finds to a log file on a network share. > > -- > Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display > Win 95/98/Me/XP Tweaks and Fixes > http://www.dougknox.com > -------------------------------- > Per user Group Policy Restrictions for XP Home and XP Pro > http://www.dougknox.com/xp/utils/xp_securityconsole.htm > -------------------------------- > Please reply only to the newsgroup so all may benefit. > Unsolicited e-mail is not answered. > > "Josh Mikow" <jmikow@applebyco.com> wrote in message > news:e66xpzihEHA.4092@TK2MSFTNGP10.phx.gbl... >> Doug, >> >> Thanks for the suggestion. I was afraid I wouldn't be able to achieve > both >> goals with 1 policy. >> >> How would we go about auditing the software installed? >> >> I was thinking of using Norton CleanSweep to monitor what is installed, > but >> is there a better way to do the same thing? >> >> Josh >> >> >> >> "Doug Knox MS-MVP" <dknox@mvps.org> wrote in message >> news:ORQzhnihEHA.4092@TK2MSFTNGP10.phx.gbl... >> You can use Group Policies to restrict access to the Add/Remove Programs >> applet and to prevent installs from MSI installer packages. However, this >> will not prevent them from using a direct installer to install software. >> >> You may be better off making them Power Users and simply auditing the >> software installed on the computer, and make it clear that software not >> provided by your organization is not allowed to be installed. Be prepared >> to make an example of the first one you catch. >> >> -- >> Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display >> Win 95/98/Me/XP Tweaks and Fixes >> http://www.dougknox.com >> -------------------------------- >> Per user Group Policy Restrictions for XP Home and XP Pro >> http://www.dougknox.com/xp/utils/xp_securityconsole.htm >> -------------------------------- >> Please reply only to the newsgroup so all may benefit. >> Unsolicited e-mail is not answered. >> >> "Josh Mikow" <jmikow@applebyco.com> wrote in message >> news:uBCj$EihEHA.3916@TK2MSFTNGP11.phx.gbl... >>> Here's what we want to be able to do. If someone could let me know if it >> is >>> even feasable that would be great. >>> >>> Domain user is logged into local Windows XP Pro SP2 machine (mobile > laptop >>> not always connected to domain). >>> >>> They are currently setup as a User and not allowed to add/remove > programs. >>> >>> They need the ability to Start/Stop services because of the demos that >> they >>> run have settings they need to change. >>> >>> There are also some settings in IE that don't seem to work as a user, but >> do >>> as Administrator. >>> >>> Can anyone help me know if it is possible to restrict add/remove programs >>> but allow start/stop services? >>> >>> Thanks, >>> >>> Josh Mikow >>> >>> >> >> > >
- Next message: beav227: "RE: access is denied - driver"
- Previous message: Doug Knox MS-MVP: "Re: Reply to the policy editor"
- In reply to: Josh Mikow: "Re: Creating Custom group for local XP Pro SP2 machine"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
