How do I prevent users from accessing the Control Panel?

Question

I know I have to create a Policy...HOW DO I DO THIS using Windows Network Server 2003?

Answer 1

Good question!



You would want to use domain or local group policy. Any other questions, let me know!



His Edit:

(1)

In a non domain: Start -> run -> gpedit.msc

+User Configuration

+Administrative Templates

+Control Panel

="Prohibit Access to the Control Panel"

(This will make it active for the logged on user)



(2)

In a domain, use Group Policy management console to create an OU. Create a new Group Policy applied to that OU. Configure the same item from above. Put your users in the OU who should not be able to get to control panel.





This requires a basic working knowledge of AD, gpos, etc.

Answer 2

- Click Start;

- Click Run;

- Type 'mmc';

- Open File Menu on the 'Console1' screen;

- Choose 'Add/Remove Snap-in...';

- Click the 'Add' button;

- Scroll down to 'Group Policy Object Editor';

- Select it then click 'Add';

- Click 'OK' on the other screen;

- Under the consol1 main screen open the TreeView as indicated below:



========================

General Control Panel Settings:

----------

Consol Root -> Local Computer Policy -> User Configuration -> Administrative Templates -> Control Panel







Internet Explorer Control Panel Settings:

----------

Consol Root -> Local Computer Policy -> Administrative Tools -> Windows Components -> Internet Explorer -> Internet Control Panel

========================



- Choose the item you want to configure, double-click on it, and enable/disable it...





PS: As far as I could remember, this will restrict the access of Control Panel for all users, as this is a Workgroup machine not a domain machine...



To apply this on a domain, its from:

'Active Directory Users and Computers'



When applying this on a domain, you can restrict specific users, computers, or even both together...



Also, in domains, its easier to configure as you can place all users who will be granted 'Access Denied' in an 'OU' and set the 'Access Denied' permission to the OU. To unrestrict a user, simply move that user from the OU itself and place him/her in another with the new permissions...





Hope this answers your question...

Answer 3

pass onto the directors account, and pass to start-administration PANNEL- clientele and p.c.. witch one, and persist with the guidelines, and you could decrease the different clientele from no longer downloading something etc. was hoping i helped

Answer 4

well on my computer. all i did was create the different users but with "limited" accounts.