Prohibit access to items for a user on a non-domain XP Pro box?

[Brian Christie]

Hi all.
Is there a way to prohibit access to items such as [Control Panel], [Run],
Windows Explorer using [Windows key]+[E] and stuff like that for a specified
user on a non-domain XP Pro box?

I can use the local policies editor and do it for all users on the box (even
the Admin account). I need to be able to do this for just a single user
account. (I'll be doing this to 186 XP Pro PCs)

Is there a way and can someone point me in the right direction?

Thanks a bunch!
Brian

[Carey Frisch [MVP]]

Doug's Windows XP Security Console
http://www.dougknox.com/xp/utils/xp_securityconsole.htm

[Courtesy of MS-MVP Doug Knox]

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect Your PC!
http://www.microsoft.com/athome/security/protect/default.aspx

------------------------------------------------------------------------------

"Brian Christie" wrote:

| Hi all.
| Is there a way to prohibit access to items such as [Control Panel], [Run],
| Windows Explorer using [Windows key]+[E] and stuff like that for a specified
| user on a non-domain XP Pro box?
|
| I can use the local policies editor and do it for all users on the box (even
| the Admin account). I need to be able to do this for just a single user
| account. (I'll be doing this to 186 XP Pro PCs)
|
| Is there a way and can someone point me in the right direction?
|
| Thanks a bunch!
| Brian

[Steve Riley [MSFT]]

186 computers? Wow. That's 186 human-created instances of an equivalent manually-configured
operating system. There's an opportunity here to make configuration mistakes
in many places. I'd recommend rethinking your strategy and trying to join
these computers to a domain so you can manage them centrally.

Steve Riley




> Hi all.
> Is there a way to prohibit access to items such as [Control Panel],
> [Run],
> Windows Explorer using [Windows key]+[E] and stuff like that for a
> specified
> user on a non-domain XP Pro box?
> I can use the local policies editor and do it for all users on the box
> (even the Admin account). I need to be able to do this for just a
> single user account. (I'll be doing this to 186 XP Pro PCs)
>
> Is there a way and can someone point me in the right direction?
>
> Thanks a bunch!
> Brian