Restricting Window$ XP Desktop



Dave
07-10-2005, 03:13 AM
Hello all,

I'm trying to manually "lock down" a limited WinXP Pro users account.
I need to know how to apply the following restrictions in the Registry
(or some other method):

No Control Panel
No Right-clicking on desktop
Cannot alter desktop in any way (i.e. no display settings)
No "Run" command
Cannot change computer clock
Force classic start menu

Thanks.

David H. Lipman
07-10-2005, 03:13 AM
From: "Dave" <professorchaos75@gmail.com>

| Hello all,
|
| I'm trying to manually "lock down" a limited WinXP Pro users account.
| I need to know how to apply the following restrictions in the Registry
| (or some other method):
|
| No Control Panel
| No Right-clicking on desktop
| Cannot alter desktop in any way (i.e. no display settings)
| No "Run" command
| Cannot change computer clock
| Force classic start menu
|
| Thanks.

Group Policies

Execute:
%windir%\system32\gpedit.msc

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Carey Frisch [MVP]
07-10-2005, 03:13 AM
HOW TO: Use the Group Policy Editor to Manage Local Computer Policy in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;307882&Product=winxp

Doug's Windows XP Security Console
http://www.dougknox.com/xp/utils/xp_securityconsole.htm

[Courtesy of MS-MVP Doug Knox]


Please visit the experts in the Group Policy newsgroup
news://msnews.microsoft.com/microsoft.public.windows.group_p­olicy

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User
Microsoft Newsgroups

Get Windows XP Service Pack 2 with Advanced Security Technologies:
http://www.microsoft.com/athome/security/protect/windowsxp/choose.mspx

-------------------------------------------------------------------------------------------

"Dave" wrote:

| Hello all,
|
| I'm trying to manually "lock down" a limited WinXP Pro users account.
| I need to know how to apply the following restrictions in the Registry
| (or some other method):
|
| No Control Panel
| No Right-clicking on desktop
| Cannot alter desktop in any way (i.e. no display settings)
| No "Run" command
| Cannot change computer clock
| Force classic start menu
|
| Thanks.
|

Doug Knox MS-MVP
07-10-2005, 03:13 AM
Note, in a non-domain environment, restrictions set thru GPEDIT apply to all users on the computer.

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message news:%23jzh7L0dFHA.3184@TK2MSFTNGP15.phx.gbl...
> From: "Dave" <professorchaos75@gmail.com>
>
> | Hello all,
> |
> | I'm trying to manually "lock down" a limited WinXP Pro users account.
> | I need to know how to apply the following restrictions in the Registry
> | (or some other method):
> |
> | No Control Panel
> | No Right-clicking on desktop
> | Cannot alter desktop in any way (i.e. no display settings)
> | No "Run" command
> | Cannot change computer clock
> | Force classic start menu
> |
> | Thanks.
>
> Group Policies
>
> Execute:
> %windir%\system32\gpedit.msc
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>

David H. Lipman
07-10-2005, 03:13 AM
From: "Doug Knox MS-MVP" <dknox@mvps.org>

| Note, in a non-domain environment, restrictions set thru GPEDIT apply to all users on the
| computer.
|
| --
| Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
| Win 95/98/Me/XP Tweaks and Fixes
| http://www.dougknox.com
| --------------------------------
| Per user Group Policy Restrictions for XP Home and XP Pro
| http://www.dougknox.com/xp/utils/xp_securityconsole.htm
| --------------------------------
| Please reply only to the newsgroup so all may benefit.
| Unsolicited e-mail is not answered.

Thanx for the clarification Doug.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


Restricting Window$ XP Desktop