Re: Administrator handling users.

Not being in an Active directory domain limits your options. What you could
test is to make the users power users, add them to the network operators
group if you need them to manage network connections, and then use Software
Restriction Policies to manage what software they can install [if any] and
run. Power users can do more than regular users such as create shares,
create non privileged user accounts, and write/delete to most
folders/registry keys in the operating system but still not do things like
manage Local Security Policy and local Group Policy via gpedit.msc. The link
below explains how to configure Software Restriction Policies using mostly
path and hash rules with a default security level of unrestricted or
disallowed. When configuring SRP keep in mind that by default shortcuts
[.lnk files] are restricted by SRP but can be removed from the file list if
needed. Also if having problems configuring rules usually a SRP event is
written to the application log. --- Steve

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx
--- XP Software Restriction Policies

"master_mfb" <master_mfb@xxxxxxxxx(donotspam)> wrote in message
news:DE493E71-EF3B-4CDD-9984-FD1D7549CB67@xxxxxxxxxxxxxxxx


"Steven L Umbach" wrote:

Not totally and you don't give us a lot of info on your situation such as
if
the operating systems are XP Pro or XP Home and if the computers are part
of
an Active Directory domain or not. You can make user local administrators
and then try to prevent them from installing software with Software
Restriction Policies in XP Pro but all they have to figure out is that
they
can boot into Safe Mode to bypass SRP. It would be better to try and make
the user just a regular user and then look at what they need to do and
see
if there are ways to accommodate such or maybe they do not need to have
as
many abilities as you think. If you could be more specific on your
situation and what users need to do maybe someone can help more. ---
Steve


"master_mfb" <master_mfb@xxxxxxxxx(donotspam)> wrote in message
news:4028B6A5-AC01-431D-BB7E-C485CF39CAC9@xxxxxxxxxxxxxxxx
Hi,
I want to be able to set my users with the ability to do everything
except
installing new software. Can I do that ?
Another thing, where in XP can I change my users settings, meaning
update
there profiles easier then the Adminitrative tools ?



Thanks for the response,
I have windows xp sp2 professional. the users are local, no network.
The only user that will connect remotely to the computer is the
administrator.
Now, how can I make those local users do everything or almost everything
except installing software ? or there is a software to limit the users
from
installing software ?

Thanks.


.

Relevant Pages

  • Re: Blocking SMT Connections by clients
    ... - you're operating with an "allow all" policy. ... associate this CAS with the SMTP protocol rule. ... Our SBS2000 server is currently ... The network is regularly ...
    (microsoft.public.isa.configuration)
  • S-l-o-w network on E3500
    ... The network os absolutely dog slow. ... Can't hardly login in to a remote ... Remote system can't hardly log in to the E3500. ... Anyway, the E3500 says it's operating at 100mbps Full-Duplex, and the ...
    (comp.unix.solaris)
  • Re: What would it take to port Mozilla to DOS?
    ... I'm not on a corporate network, ... operating system's standpoint, is usage. ... were born in DOS, have you? ... Or the weekly downloads of mcafee's ...
    (comp.os.msdos.programmer)
  • Re: Problem accessing a file on a remote machine from a Service app. XP.
    ... as the *computer account* for network operations. ... If you are NOT operating in a domain scenario, ...
    (microsoft.public.platformsdk.security)
  • Re: Yet another quest re. Caps-Lock & Ctrl keys
    ... Is there a switch that can be set within the operating itself, ... Ctrl key without installing software or accessing the registry? ... Remapkey.exe from the Windows Resource Kit will do ...
    (microsoft.public.win2000.general)