Re: prevent a user from creating new Remote Access Connections

From: Doug Knox MS-MVP (dknox_at_mvps.org)
Date: 12/03/04 

Date: Thu, 2 Dec 2004 22:57:42 -0500

However, in a non-domain environment, the settings in GPEDIT apply to all users, not just limited users. 

-- 
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
 
"Juan" <soyquiensoy@terra.com> wrote in message news:OsX%23D6F2EHA.2788@TK2MSFTNGP15.phx.gbl...
> With a little patience and a lot of persistence you can find the
> right directives in the Group Editor that meet your management needs.
> here you can disable the Control Panel, the Run command, the
> Command prompt, the Taskmanager and also configure system
> directives to prevent programs from running:
> 
> User Configuration\Management Templates\Control Panel\
> enable; "Prohibit access to the Control Panel"
> Removes access to the Control Panel to prevent users from
> creating new remote access connection in Control Panel\
> System\Remote Access
> 
> In Start Menu and Taskbar\enable; "Remove the Run menu
> from the start menu".....
> Prevents access to the Run command is so they can not run
> programs by typing program's executables
> 
> In System\enable; "prevent access to command prompt"
> Removes access to the command prompt to prevent
> running programs from there.
> 
> In the ctrl+alt+del options folder, enable\remove taskmanager
> Disable taskmanager so programs cannot be executed by
> the New Task command.
> 
> In System\enable; "do not execute specified windows applications"
> click on; show\add\type; program.exe (program's executables)
> The programs here mentioned can be disabled for users adding the,
> to this directive therefore this may be all you have to configure,
> EG: add programs as;
> cmd.exe       (is command prompt)
> tskmngr.exe (is taskmanager)
> control.exe   (is control panel)
> If you wish to disable other programs, add their executables here...
> you can get the executables from the taskmanager with the
> specific program running.
> 
> 
> ----------Original Message---------------------
> "Stefano B." <stefboombastic@libero.it> escribió en el mensaje
> news:311f11e3.0412020025.30868bbd@posting.google.com...
>> Hello everybody :)
>>  I need a way to prevent a user (and all programs running with its
>> rights!!) from creating new Remote Access Connections.
>> I tried to use the windows criteria in gpedit.msc, i can find criteria
>> about preventing deletion, opening/stopping previous created ones, but
>> nothing about what I need!
>> This should be a very important security option ... think to those
>> malicious little, subtle, programs from the web that install
>> themselves very quickly, creates new connections to very expensive pay
>> numbers ... they can easily fool children or not expert people ... It
>> would be very easy to avoid that only by allowing only to
>> administrators to create new connections, giving to such users only a
>> non administrative accounts!!
>>  Is there anyone who can accomplish that?
>> Thank You very much in advance!
>> Stefano B
> 
>

Relevant Pages

  • Re: prevent a user from creating new Remote Access Connections
    ... Command prompt, the Taskmanager and also configure system ... "Prohibit access to the Control Panel" ... programs by typing program's executables ...
    (microsoft.public.windowsxp.security_admin)
  • Re: prevent a user from creating new Remote Access Connections
    ... And of course I can't foresee the names of executables coming from the net!! ... > here you can disable the Control Panel, the Run command, the ... > Command prompt, the Taskmanager and also configure system ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Still trying to remove W2K PC from NT4 Domain...
    ... I wonder why I was unable to do that from Control Panel? ... Administrator, ... "Type this command in a Command Prompt and make a ... Log on locally under the preferred account name. ...
    (microsoft.public.win2000.general)
  • Re: How to change regional settings (date format) from command line ?
    ... I know of no way to do this at the command prompt and I know of no Microsoft tool or built in utility that allows you to do this direcly at the command prompt. ... you should be able to change it via the Control Panel Regional Options applet even if you do not have Administrator rights. ... Would this registry method still work? ... You can use Regedit.exe and a .reg file to import the setting to the ...
    (microsoft.public.win2000.general)
  • Re: no desktop icons, start menu, task bar??
    ... TaskManager is hosed somewhat also, as it will not allow me to open a file. ... Is there an easy way to access a command prompt without going back and forth ... What does "task manager is hosed somewhat" mean? ... Click through any complaining messages. ...
    (microsoft.public.windowsxp.general)
Quantcast