Re: Prevent users installing software

Access to "network" resources are applied to the user accounts. It really
doesn't matter what OS they are on.

NTFS is a file system. You can format your hard drive as NTFS on any
operating system that will support it. Once formatted NTFS, you can use NTFS
permissions to control access to that hard drive's folders.

NTFS permissions are more secure than other file systems like FAT. XP
home/Professional supports NTFS and FAT.

In a usual domain setup there is a file server that would be formatted NTFS.
On that server you would share out a folder and use NTFS permissions to
allow a user account the rights to Full Control - Modify - Write - Read -
etc.

A user tries connect to that folder. If you have not given him access they
get access denied. If you did give them access they are allowed to connect.
If you only gave them read access thy can only read the document, they can't
write to it.

With FAT file system on the server (If I remember correctly) you get
prompted for a password. If you know the password you are allowed to access
the folder. But you can't control who can write to the file with FAT
permissions.

So even though XP Professional has the capability of connecting to a
domain
and Active Directory, and providing more security this way. Can an XP Home
PC
still access the network resources then? Does XP Home have NTFS
permissions?


XP home can access resources on a "network". If you format the XP home hard
drive as NTFS, XP home will have NTFS permissions.

NTFS permissions come from the shared folder on the sharing computer's NTFS
formatted partition. The connecting computer does not have to be formatted
NTFS to access that shared folder. If it is formatted FAT *those*
permissions are in effect when *that* computer shares a folder.

hth
DDS W 2k MVP MCSE

"jeffuk123" <jeffuk123@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:697D7D2E-7E90-449D-9DBA-ECE7787AFB9B@xxxxxxxxxxxxxxxx
Thanks Danny,

Sorry I confused myself there.

Sometime ago a friend said that Windows XP Home can access all network
resources and this means less security on XP Home.

So even though XP Professional has the capability of connecting to a
domain
and Active Directory, and providing more security this way. Can an XP Home
PC
still access the network resources then? Does XP Home have NTFS
permissions?

Thanks

"Danny Sanders" wrote:

I thought that being on a workgroup users would have access to network
resources and the whole point of being on a domain was to prevent
this!!!


The whole point of a "network" is to share resources. If a domain
prevented
network access there would be no need for a domain.

A domain provides a central point where you can manage accounts and
resources.

hth
DDS W 2k MVP MCSE


"jeffuk123" <jeffuk123@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:E8857C66-50C2-4E93-B78A-711F87186727@xxxxxxxxxxxxxxxx
Thanks Guys,

Apart from these users members of the public need to be able to access
the
internet if they take their own laptops to the mobile classroom.

I thought that being on a workgroup users would have access to network
resources and the whole point of being on a domain was to prevent
this!!!

Many thanks

"Leythos" wrote:

In article <65B0DA00-AFF6-42C0-B1D7-77962CAC845F@xxxxxxxxxxxxx>,
jeffuk123@xxxxxxxxxxxxxxxxxxxxxxxxx says...
Hello to all,

I would be most grateful if anyone could give me some guidance on
how
to
prevent users from installing software and changing settings on a
standalone
windows xp laptop or PC.

Basically, the users will only have Internet access and will be
taking
the
laptops away with them from the workplace, but must have basic user
accounts.

The other way, although this may not be within the realms of this
thread.
Our cleint has a windows 2003 server and the new laptops must not
have
access
to exisitng network resources also. How could I set this up on the
domain
controller whereby users can access the internet, but not be able to
access
the exisiting network resources. I was wondering if I could join the
laptops
to the existing domain and create a group for these users and then
deny
this
group access to the existing network resources, and prevent them
from
being
able to change settings and install software through group policy.
However,
where in group policy does this occur and would it be best to create
mandatory profiles?

Any idea and guidance would really be appreciated about how to set
this
up.

Many thanks to all,

Computers that are part of a "Workgroup" and never having been part of
the "Domain" that don't have complementary accounts on the domain,
don't
have access to the Server files, but they could get access to DHCP and
internet depending on how you have your Internet firewall setup.

--

spam999free@xxxxxxxxxx
remove 999 in order to email me






.

Quantcast