Re: Read only account

You can restrict a user account so that is only has read/list/execute
permissions to a folder and using Group Policy [computer
configuration/administrative templates/Windows components/terminal
services/client&server data redirection] to restrict redirection of
clipboard/drives/printer but that will not totally prevent the user from
copying information as for instance the user could try doing screen shots,
printing the screen, or even photographing their display if that would be a
concern. If you can provide access through a VPN server using l2tp at least
you could prevent attackers from accessing your computer unless they get
physical access to a legitimate remote computer because l2tp requires that
the computers authenticate via certificates before the user can attempt to
authenticate to the VPN server. I would also disable the ability of users
to save their password for their TS client connection via Group Policy. ---
Steve


"Rick K" <RickK@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:139199D5-4B46-48E4-86FC-8B9E0AC676D3@xxxxxxxxxxxxxxxx
>I want to provide my users access from home to an XP pro system via XP
>remote
> service for the propuse of viewing our company's databases which is hosted
> on
> a server and viewed via an application (client) on the XP system.
> Question: Is it possible to create a user account that is a "Read Only"
> account? I reviewed security policies and group policies but can't find
> the
> items to enable this function. Even though we will be using strong
> passwording, I do not want to allow outside users to create, change, print
> or
> export anything (read only). [I am planning to restrict application access
> to
> only those allowed]
> Any suggentions?


.

Relevant Pages

  • Re: Access denied to Control Panel applets!
    ... You could also try running gpresult /z to get ... track it down if it is Group Policy related but it is not real user friendly ... it reports his user account in the OU you expect and compare his gpresult ... that much - nothing for the control panel etc... ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Restrict logon hours
    ... Change Logon Times for a User Account ... Edit the user account properties by using the net user command. ... Enforce Logon Time Restrictions Using Group Policy ...
    (microsoft.public.win2000.group_policy)
  • RE: Group policy not applied
    ... If you logon this workstation with another regular user, does the GPO ... click to check the "Hide All Microsoft Services" ... problematic user account in the same OU with the good user account. ... | Thread-Topic: Group policy not applied ...
    (microsoft.public.windows.server.sbs)
  • Re: Setting up new users
    ... could do is to let the users logon as the guest account. ... configured in permissions for a share folder so keep that in mind. ... Use Group Policy to restrict the users further. ...
    (microsoft.public.win2000.security)
  • Re: Access denied to Control Panel applets!
    ... GPO's - making sure to refresh and running gpresult to see which OU it said ... must be a huge f_ck up in active directory group policy - wherever it stores ... indicate a GP is applying those restrictions to his user account. ... that much - nothing for the control panel etc... ...
    (microsoft.public.windowsxp.security_admin)