Re: Hiding Control Panel For All?

You might be able to exempt administrators by giving administrators deny
read permissions to the \windows\system32\group policy\user folder. But to
then manage Group Policy again you would need to give administrators read
permission again to that folder or manage GP remotely from another computer
on the network using the mmc snapin for Group Policy and selecting another
computer. Unless you are going to change GP a lot that may be a decent
solution. Also be sure to look at the free Microsoft Shared Computer Toolkit
at the link below. Note that hiding Control Panel will not stop the savvy
user from searching for the .cpl file and accessing it that way. You could
also implement Software Restriction Policies if you really want to lock the
computer down and the as the Shared Computer Toolkit does in a limited way.
By default local administrators are exempt from Software Restriction
Policies. --- Steve

http://www.microsoft.com/windowsxp/sharedaccess/overview.mspx --- Shared
Computer Tookit which required SP2.
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx
--- XP Software Restrcition Policies.

"Dave" <dcass55@xxxxxxxxxxx> wrote in message
news:1137435262.565798.244510@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> Hi all,
> I'm trying to hide the control panel on several local stand alone XP
> Pro PC's in the office. All the user accounts are set up as Power
> Users. After a lot of reading, it looks like the best way to do this
> is to use group policies. I set this up on my test system and it works
> fine. My question is: this change affected all the groups, including
> Administrators. Does this mean every time I log in as Administrator I
> have to un-hide the control panel to make changes or can I limit hiding
> the control panel to every one but the Administrator? Is there a
> better way??
>
> Thanks in advance...
>
> Dave
>


.

Relevant Pages

  • Re: Group policy problem (XP alone and XP with NT server)
    ... I see you've discovered the fact that some of the policies go ... the GroupPolicy folder whose access permissions you need to ... Double click your Local Group Policy editor shortcut. ... Click on Administrators to highlight that group. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: user and administrator policies
    ... All you really need to do is give "administrators" deny for apply. ... Be sure to install Group Policy Management Console on your domain controller ... FYI Windows 2003 and XP Pro can use Software Restriction Policies managed ... > administrators mchs\administrators deny group policy ...
    (microsoft.public.win2000.security)
  • Re: terminal Services Policies not working
    ... I have a server that is only being used as a for Terminal Server. ... Administrators would need full desktops. ... We then are trying to set up the Policies from the Group Policy Object ... Group Policy Editor for Domains also have some policies for the Terminal ...
    (microsoft.public.windows.terminal_services)
  • Re: Lack Sufficient Administrator Privileges
    ... > Can you open Group Policy editor as in gpedit.msc and if so did you make the ... When you run the command net localgroup administrators ... > root/drive folder, the program files folder, the \Windows folder, the ... >> trying to install Quicktime, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Run application on remote login
    ... user only to be in enterprise admin. ... administrators group and removed administrators from the enterprise admin ... "Jeff Pitsch" wrote: ... service group policy. ...
    (microsoft.public.windows.terminal_services)