Re: network restrictions

As Shenan said make every effort to not allow the users to be power users or 
administrators on their computer. Beyond that you can manage NTFS 
folder/file permissions and or use Software Restriction Policies to prevent 
users from installing software or running unauthorized applications on their 
computers. Again this is only effective if the users are not local 
administrators as local administrators have the ability to override 
restrictions if they know how and want to. Software Restriction Policies are 
very powerful with the use of mostly has and path rules but they take a bit 
of tweaking to get the way you want and it is best to configure a test 
computer before trying to apply to everybody. In an Active Directory domain 
SRP and other Group Policy is easily applied to domain computers. For non 
domain situation SRP can still be applied but each computer will need to be 
configured individually on each computer. The link below explains SRP in 
detail and beware that desktop and program shortcuts are restricted by SRP 
so you would need to make allowances for such in the rules or designated 
file types.  --- Steve

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx 
   --- Software Restriction Policies

"Christopher S. Coviello" <chriscoviello@xxxxxxxxxxxxxx> wrote in message 
news:%23V1FtkuJGHA.3504@xxxxxxxxxxxxxxxxxxxxxxx
>i am setting up a few computers on a small network for a small biz.  i 
>would
> like to know if someone could help me in learing how to lock out programs 
> on
> the computer so that the user cant go in and install anything and play 
> games
> while they are to be working.
> any help or suggestions would do.
> the os is xp pro
>
> --
> Christopher S. Coviello
>
> 


.

Relevant Pages

  • Re: File Level Blocking
    ... permissions on all files except for permitted file extensions, ... apply a security template / database you created using MMC.EXE and the ... and deploy Software Restriction Policies. ... administrator can bypass SRP by booting the computer into Safe Mode. ...
    (microsoft.public.windows.server.security)
  • Re: Software Restriction Policy
    ... > How to Start Software Restriction Policies ... > guidelines that are set up by administrators when they run programs. ... > Prevent any files from running on your local computer, ... > The only file types that are affected by certificate rules are those ...
    (microsoft.public.windowsxp.security_admin)
  • Re: USB Drives
    ... Administrators or else you will have a very difficult time - particularly ... In Windows 2000 you can use Group Policy user ... -- Software Restriction Policies. ... >I would like to create a policy that allows access to data on USB drives, ...
    (microsoft.public.windows.group_policy)
  • Re: Prevent users from installing software
    ... if not I will look into applying SRP. ... > users back to Windows 2000. ... >>First off it is extremely difficult to restrict an administrator and you ... Note however that local administrators can bypass SRP ...
    (microsoft.public.win2000.security)
  • Re: Prevent users from installing software
    ... First off it is extremely difficult to restrict an administrator and you ... applications a user can install or run with hash, certificate, and path ... under SRP. ... Note however that local administrators can bypass SRP ...
    (microsoft.public.win2000.security)