If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below. |
|
|
Thread Tools | Display Modes |
#1
|
|||
|
|||
Control Panel
I run a day care center. Part of my program provides PCs with
educational software for the children to use. The PCs are all XP/HOME SP3. The accounts available to the kids are all user access accounts with as few privleges as possible. Still, the more inventive kids seem able to make undesireaable system changes. What I want to know is whether or not I can restrict access to the Control Panel. I don't really care if the kids can see Control Panel. What I want is to prevent any user without administrative privleges from actually using the Control Panel. Is this possible? |
Ads |
#2
|
|||
|
|||
Control Panel
A program called Deep Freeze will reset everything back to what it used to
be upon restart I believe. Another option is to use something like Sandboxie. Deep Freeze might be better though. Sandboxie is a little hard to grasp for some people. I run a day care center. Part of my program provides PCs with educational software for the children to use. The PCs are all XP/HOME SP3. The accounts available to the kids are all user access accounts with as few privleges as possible. Still, the more inventive kids seem able to make undesireaable system changes. What I want to know is whether or not I can restrict access to the Control Panel. I don't really care if the kids can see Control Panel. What I want is to prevent any user without administrative privleges from actually using the Control Panel. Is this possible? |
#3
|
|||
|
|||
Control Panel
A program called Deep Freeze will reset everything back to what it used to
be upon restart I believe. Another option is to use something like Sandboxie. Deep Freeze might be better though. Sandboxie is a little hard to grasp for some people. I run a day care center. Part of my program provides PCs with educational software for the children to use. The PCs are all XP/HOME SP3. The accounts available to the kids are all user access accounts with as few privleges as possible. Still, the more inventive kids seem able to make undesireaable system changes. What I want to know is whether or not I can restrict access to the Control Panel. I don't really care if the kids can see Control Panel. What I want is to prevent any user without administrative privleges from actually using the Control Panel. Is this possible? |
#4
|
|||
|
|||
Control Panel
David wrote in message ...
I run a day care center. Part of my program provides PCs with educational software for the children to use. The PCs are all XP/HOME SP3. The accounts available to the kids are all user access accounts with as few privleges as possible. Still, the more inventive kids seem able to make undesireaable system changes. What I want to know is whether or not I can restrict access to the Control Panel. I don't really care if the kids can see Control Panel. What I want is to prevent any user without administrative privleges from actually using the Control Panel. Is this possible? You might consider this program. Windows SteadyState http://www.microsoft.com/windows/pro...s/default.mspx For more info on configuring Windows SteadyState, take a look at this web site. Windows SteadyState Manual http://download.microsoft.com/downlo...20Handbook.pdf Any other questions you have concerning the program should be posted to this web site. Windows SteadyState Forum http://forums.microsoft.com/WindowsT...1660&SiteID=69 Good luck Nepatsfan |
#5
|
|||
|
|||
Control Panel
David wrote in message ...
I run a day care center. Part of my program provides PCs with educational software for the children to use. The PCs are all XP/HOME SP3. The accounts available to the kids are all user access accounts with as few privleges as possible. Still, the more inventive kids seem able to make undesireaable system changes. What I want to know is whether or not I can restrict access to the Control Panel. I don't really care if the kids can see Control Panel. What I want is to prevent any user without administrative privleges from actually using the Control Panel. Is this possible? You might consider this program. Windows SteadyState http://www.microsoft.com/windows/pro...s/default.mspx For more info on configuring Windows SteadyState, take a look at this web site. Windows SteadyState Manual http://download.microsoft.com/downlo...20Handbook.pdf Any other questions you have concerning the program should be posted to this web site. Windows SteadyState Forum http://forums.microsoft.com/WindowsT...1660&SiteID=69 Good luck Nepatsfan |
#6
|
|||
|
|||
Control Panel
Deep Freeze seems a good option. Thanks
My office workstation has XP/PRO SP3. One difference between XP/PRO & XP/HOME allows me to see the security tab when right-clicking on a file & selecting Properties. I found an executable file c:\windows\system32\control.exe which apparently runs the Control Panel. Upon checking the security tab, I found SYSTEM & Admin accounts have full privileges. However USER accounts have Read & Read/Execute. What would happen if I removed Read/Execute from Control.exe for user accounts leaving only Read privilege? It seems at least that this would prevent USERs from using Control panel. If I did this, would there be any adverse consequences I have not thought of? How do I access the security tab on a XP/HOME machine? On Tue, 12 Jan 2010 13:26:00 -0600, MICROSOFT wrote: A program called Deep Freeze will reset everything back to what it used to be upon restart I believe. Another option is to use something like Sandboxie. Deep Freeze might be better though. Sandboxie is a little hard to grasp for some people. I run a day care center. Part of my program provides PCs with educational software for the children to use. The PCs are all XP/HOME SP3. The accounts available to the kids are all user access accounts with as few privleges as possible. Still, the more inventive kids seem able to make undesireaable system changes. What I want to know is whether or not I can restrict access to the Control Panel. I don't really care if the kids can see Control Panel. What I want is to prevent any user without administrative privleges from actually using the Control Panel. Is this possible? |
#7
|
|||
|
|||
Control Panel
Deep Freeze seems a good option. Thanks
My office workstation has XP/PRO SP3. One difference between XP/PRO & XP/HOME allows me to see the security tab when right-clicking on a file & selecting Properties. I found an executable file c:\windows\system32\control.exe which apparently runs the Control Panel. Upon checking the security tab, I found SYSTEM & Admin accounts have full privileges. However USER accounts have Read & Read/Execute. What would happen if I removed Read/Execute from Control.exe for user accounts leaving only Read privilege? It seems at least that this would prevent USERs from using Control panel. If I did this, would there be any adverse consequences I have not thought of? How do I access the security tab on a XP/HOME machine? On Tue, 12 Jan 2010 13:26:00 -0600, MICROSOFT wrote: A program called Deep Freeze will reset everything back to what it used to be upon restart I believe. Another option is to use something like Sandboxie. Deep Freeze might be better though. Sandboxie is a little hard to grasp for some people. I run a day care center. Part of my program provides PCs with educational software for the children to use. The PCs are all XP/HOME SP3. The accounts available to the kids are all user access accounts with as few privleges as possible. Still, the more inventive kids seem able to make undesireaable system changes. What I want to know is whether or not I can restrict access to the Control Panel. I don't really care if the kids can see Control Panel. What I want is to prevent any user without administrative privleges from actually using the Control Panel. Is this possible? |
#8
|
|||
|
|||
Control Panel
[re]Setting the file permissions on control.exe may have negative and unforeseen effects on the Window's Explorer shell and would not necessarily stop individual CPLs (Control Panel Extensions) from being opened. This is because in the right-click menu in explorer for [.cpl] files, there are two ways of opening ; one is "open with Control Panel" and yes, this would *not* work if you modified the permissions, as you said. But the other item "Explore" uses the system command : rundll32.exe shell32.dll,Control_RunDLL "%1" ....to open [.cpl] files and this *still* works (bypassing control.exe). So, if you did what you suggested - Control Panel would not show up in "My Computer" and would not be accessible but may also cause Explorer to crash. And, anyway, if the user looked in the system32 folder and right-clicked on a [.cpl] file it could still be opened by choosing "Explore". *([.cpl] files account for most of the items that show up in Control Panel) == Cheers, Tim Meddick, Peckham, London. :-) David wrote in message ... Deep Freeze seems a good option. Thanks My office workstation has XP/PRO SP3. One difference between XP/PRO & XP/HOME allows me to see the security tab when right-clicking on a file & selecting Properties. I found an executable file c:\windows\system32\control.exe which apparently runs the Control Panel. Upon checking the security tab, I found SYSTEM & Admin accounts have full privileges. However USER accounts have Read & Read/Execute. What would happen if I removed Read/Execute from Control.exe for user accounts leaving only Read privilege? It seems at least that this would prevent USERs from using Control panel. If I did this, would there be any adverse consequences I have not thought of? How do I access the security tab on a XP/HOME machine? On Tue, 12 Jan 2010 13:26:00 -0600, MICROSOFT wrote: A program called Deep Freeze will reset everything back to what it used to be upon restart I believe. Another option is to use something like Sandboxie. Deep Freeze might be better though. Sandboxie is a little hard to grasp for some people. I run a day care center. Part of my program provides PCs with educational software for the children to use. The PCs are all XP/HOME SP3. The accounts available to the kids are all user access accounts with as few privleges as possible. Still, the more inventive kids seem able to make undesireaable system changes. What I want to know is whether or not I can restrict access to the Control Panel. I don't really care if the kids can see Control Panel. What I want is to prevent any user without administrative privleges from actually using the Control Panel. Is this possible? |
#9
|
|||
|
|||
Control Panel
[re]Setting the file permissions on control.exe may have negative and unforeseen effects on the Window's Explorer shell and would not necessarily stop individual CPLs (Control Panel Extensions) from being opened. This is because in the right-click menu in explorer for [.cpl] files, there are two ways of opening ; one is "open with Control Panel" and yes, this would *not* work if you modified the permissions, as you said. But the other item "Explore" uses the system command : rundll32.exe shell32.dll,Control_RunDLL "%1" ....to open [.cpl] files and this *still* works (bypassing control.exe). So, if you did what you suggested - Control Panel would not show up in "My Computer" and would not be accessible but may also cause Explorer to crash. And, anyway, if the user looked in the system32 folder and right-clicked on a [.cpl] file it could still be opened by choosing "Explore". *([.cpl] files account for most of the items that show up in Control Panel) == Cheers, Tim Meddick, Peckham, London. :-) David wrote in message ... Deep Freeze seems a good option. Thanks My office workstation has XP/PRO SP3. One difference between XP/PRO & XP/HOME allows me to see the security tab when right-clicking on a file & selecting Properties. I found an executable file c:\windows\system32\control.exe which apparently runs the Control Panel. Upon checking the security tab, I found SYSTEM & Admin accounts have full privileges. However USER accounts have Read & Read/Execute. What would happen if I removed Read/Execute from Control.exe for user accounts leaving only Read privilege? It seems at least that this would prevent USERs from using Control panel. If I did this, would there be any adverse consequences I have not thought of? How do I access the security tab on a XP/HOME machine? On Tue, 12 Jan 2010 13:26:00 -0600, MICROSOFT wrote: A program called Deep Freeze will reset everything back to what it used to be upon restart I believe. Another option is to use something like Sandboxie. Deep Freeze might be better though. Sandboxie is a little hard to grasp for some people. I run a day care center. Part of my program provides PCs with educational software for the children to use. The PCs are all XP/HOME SP3. The accounts available to the kids are all user access accounts with as few privleges as possible. Still, the more inventive kids seem able to make undesireaable system changes. What I want to know is whether or not I can restrict access to the Control Panel. I don't really care if the kids can see Control Panel. What I want is to prevent any user without administrative privleges from actually using the Control Panel. Is this possible? |
#10
|
|||
|
|||
Control Panel
On 1/12/2010 2:35 PM, David wrote:
Deep Freeze seems a good option. Thanks My office workstation has XP/PRO SP3. One difference between XP/PRO & XP/HOME allows me to see the security tab when right-clicking on a file & selecting Properties. I found an executable file c:\windows\system32\control.exe which apparently runs the Control Panel. Upon checking the security tab, I found SYSTEM & Admin accounts have full privileges. However USER accounts have Read & Read/Execute. What would happen if I removed Read/Execute from Control.exe for user accounts leaving only Read privilege? It seems at least that this would prevent USERs from using Control panel. If I did this, would there be any adverse consequences I have not thought of? How do I access the security tab on a XP/HOME machine? On Tue, 12 Jan 2010 13:26:00 -0600, MICROSOFT wrote: A program called Deep Freeze will reset everything back to what it used to be upon restart I believe. Another option is to use something like Sandboxie. Deep Freeze might be better though. Sandboxie is a little hard to grasp for some people. I run a day care center. Part of my program provides PCs with educational software for the children to use. The PCs are all XP/HOME SP3. The accounts available to the kids are all user access accounts with as few privleges as possible. Still, the more inventive kids seem able to make undesireaable system changes. What I want to know is whether or not I can restrict access to the Control Panel. I don't really care if the kids can see Control Panel. What I want is to prevent any user without administrative privleges from actually using the Control Panel. Is this possible? To get the security tab on XP home you need to go into the Folders Options and clear the check mark on the line that says "Use simple file sharing". An alternative to Deep Freeze would be Steadystate from Microsoft available he http://www.microsoft.com/windows/pro...s/default.mspx -- Roy Smith Windows 7 Timestamp: Tuesday, January 12, 2010 9:15:24 PM |
#11
|
|||
|
|||
Control Panel
On 1/12/2010 2:35 PM, David wrote:
Deep Freeze seems a good option. Thanks My office workstation has XP/PRO SP3. One difference between XP/PRO & XP/HOME allows me to see the security tab when right-clicking on a file & selecting Properties. I found an executable file c:\windows\system32\control.exe which apparently runs the Control Panel. Upon checking the security tab, I found SYSTEM & Admin accounts have full privileges. However USER accounts have Read & Read/Execute. What would happen if I removed Read/Execute from Control.exe for user accounts leaving only Read privilege? It seems at least that this would prevent USERs from using Control panel. If I did this, would there be any adverse consequences I have not thought of? How do I access the security tab on a XP/HOME machine? On Tue, 12 Jan 2010 13:26:00 -0600, MICROSOFT wrote: A program called Deep Freeze will reset everything back to what it used to be upon restart I believe. Another option is to use something like Sandboxie. Deep Freeze might be better though. Sandboxie is a little hard to grasp for some people. I run a day care center. Part of my program provides PCs with educational software for the children to use. The PCs are all XP/HOME SP3. The accounts available to the kids are all user access accounts with as few privleges as possible. Still, the more inventive kids seem able to make undesireaable system changes. What I want to know is whether or not I can restrict access to the Control Panel. I don't really care if the kids can see Control Panel. What I want is to prevent any user without administrative privleges from actually using the Control Panel. Is this possible? To get the security tab on XP home you need to go into the Folders Options and clear the check mark on the line that says "Use simple file sharing". An alternative to Deep Freeze would be Steadystate from Microsoft available he http://www.microsoft.com/windows/pro...s/default.mspx -- Roy Smith Windows 7 Timestamp: Tuesday, January 12, 2010 9:15:24 PM |
#12
|
|||
|
|||
Control Panel
control.exe is an interesting executable. I could not change the
permissions because the security tab is missing in XP/HOME. I will try the suggestions others have made. What I did try (reckless?) was to rename control.exe. This did not work either because as soon as I changed the name, Windows immediately created another copy of control.exe with the original date/time. - Amazing The sole point of trying to prevent access to Control Panel is to prevent users from adjusting the sound volume. I am beginning to wonder if this may be a fruitless exercise. I noticed this morning that the stupid keyboard has 3 extra buttons on it. Two for raising/lowering the volume & 1 for mute. The kids found the 3 buttons before I did. There may be only one sure fire way to keep the sound volume down. That is to physically remove the audio cable. I can't remove the speakers as they are integrated into the monitor. I will give Windows Steady State a try. I don't know if it will work, but it may. According to the description, it appears that Deep Freeze will not work. The goal is to keep the sound volume low during a user session, not just at reboot time. On Wed, 13 Jan 2010 00:06:07 -0000, "Tim Meddick" wrote: [re]Setting the file permissions on control.exe may have negative and unforeseen effects on the Window's Explorer shell and would not necessarily stop individual CPLs (Control Panel Extensions) from being opened. This is because in the right-click menu in explorer for [.cpl] files, there are two ways of opening ; one is "open with Control Panel" and yes, this would *not* work if you modified the permissions, as you said. But the other item "Explore" uses the system command : rundll32.exe shell32.dll,Control_RunDLL "%1" ...to open [.cpl] files and this *still* works (bypassing control.exe). So, if you did what you suggested - Control Panel would not show up in "My Computer" and would not be accessible but may also cause Explorer to crash. And, anyway, if the user looked in the system32 folder and right-clicked on a [.cpl] file it could still be opened by choosing "Explore". *([.cpl] files account for most of the items that show up in Control Panel) == Cheers, Tim Meddick, Peckham, London. :-) David wrote in message ... Deep Freeze seems a good option. Thanks My office workstation has XP/PRO SP3. One difference between XP/PRO & XP/HOME allows me to see the security tab when right-clicking on a file & selecting Properties. I found an executable file c:\windows\system32\control.exe which apparently runs the Control Panel. Upon checking the security tab, I found SYSTEM & Admin accounts have full privileges. However USER accounts have Read & Read/Execute. What would happen if I removed Read/Execute from Control.exe for user accounts leaving only Read privilege? It seems at least that this would prevent USERs from using Control panel. If I did this, would there be any adverse consequences I have not thought of? How do I access the security tab on a XP/HOME machine? On Tue, 12 Jan 2010 13:26:00 -0600, MICROSOFT wrote: A program called Deep Freeze will reset everything back to what it used to be upon restart I believe. Another option is to use something like Sandboxie. Deep Freeze might be better though. Sandboxie is a little hard to grasp for some people. I run a day care center. Part of my program provides PCs with educational software for the children to use. The PCs are all XP/HOME SP3. The accounts available to the kids are all user access accounts with as few privleges as possible. Still, the more inventive kids seem able to make undesireaable system changes. What I want to know is whether or not I can restrict access to the Control Panel. I don't really care if the kids can see Control Panel. What I want is to prevent any user without administrative privleges from actually using the Control Panel. Is this possible? |
#13
|
|||
|
|||
Control Panel
control.exe is an interesting executable. I could not change the
permissions because the security tab is missing in XP/HOME. I will try the suggestions others have made. What I did try (reckless?) was to rename control.exe. This did not work either because as soon as I changed the name, Windows immediately created another copy of control.exe with the original date/time. - Amazing The sole point of trying to prevent access to Control Panel is to prevent users from adjusting the sound volume. I am beginning to wonder if this may be a fruitless exercise. I noticed this morning that the stupid keyboard has 3 extra buttons on it. Two for raising/lowering the volume & 1 for mute. The kids found the 3 buttons before I did. There may be only one sure fire way to keep the sound volume down. That is to physically remove the audio cable. I can't remove the speakers as they are integrated into the monitor. I will give Windows Steady State a try. I don't know if it will work, but it may. According to the description, it appears that Deep Freeze will not work. The goal is to keep the sound volume low during a user session, not just at reboot time. On Wed, 13 Jan 2010 00:06:07 -0000, "Tim Meddick" wrote: [re]Setting the file permissions on control.exe may have negative and unforeseen effects on the Window's Explorer shell and would not necessarily stop individual CPLs (Control Panel Extensions) from being opened. This is because in the right-click menu in explorer for [.cpl] files, there are two ways of opening ; one is "open with Control Panel" and yes, this would *not* work if you modified the permissions, as you said. But the other item "Explore" uses the system command : rundll32.exe shell32.dll,Control_RunDLL "%1" ...to open [.cpl] files and this *still* works (bypassing control.exe). So, if you did what you suggested - Control Panel would not show up in "My Computer" and would not be accessible but may also cause Explorer to crash. And, anyway, if the user looked in the system32 folder and right-clicked on a [.cpl] file it could still be opened by choosing "Explore". *([.cpl] files account for most of the items that show up in Control Panel) == Cheers, Tim Meddick, Peckham, London. :-) David wrote in message ... Deep Freeze seems a good option. Thanks My office workstation has XP/PRO SP3. One difference between XP/PRO & XP/HOME allows me to see the security tab when right-clicking on a file & selecting Properties. I found an executable file c:\windows\system32\control.exe which apparently runs the Control Panel. Upon checking the security tab, I found SYSTEM & Admin accounts have full privileges. However USER accounts have Read & Read/Execute. What would happen if I removed Read/Execute from Control.exe for user accounts leaving only Read privilege? It seems at least that this would prevent USERs from using Control panel. If I did this, would there be any adverse consequences I have not thought of? How do I access the security tab on a XP/HOME machine? On Tue, 12 Jan 2010 13:26:00 -0600, MICROSOFT wrote: A program called Deep Freeze will reset everything back to what it used to be upon restart I believe. Another option is to use something like Sandboxie. Deep Freeze might be better though. Sandboxie is a little hard to grasp for some people. I run a day care center. Part of my program provides PCs with educational software for the children to use. The PCs are all XP/HOME SP3. The accounts available to the kids are all user access accounts with as few privleges as possible. Still, the more inventive kids seem able to make undesireaable system changes. What I want to know is whether or not I can restrict access to the Control Panel. I don't really care if the kids can see Control Panel. What I want is to prevent any user without administrative privleges from actually using the Control Panel. Is this possible? |
#14
|
|||
|
|||
Control Panel
In ,
David David typed: I run a day care center. Part of my program provides PCs with educational software for the children to use. The PCs are all XP/HOME SP3. The accounts available to the kids are all user access accounts with as few privleges as possible. Still, the more inventive kids seem able to make undesireaable system changes. What I want to know is whether or not I can restrict access to the Control Panel. I don't really care if the kids can see Control Panel. What I want is to prevent any user without administrative privleges from actually using the Control Panel. Is this possible? IMO you've had a couple of good programs recommended so far. How about the physical speaker volume controls; are they accessible to the kids? Turn them down so when they max out the PC volume it only rises to a certain level that can be lived with. I liked steadystate the time I tried it. HTH, Twayne |
#15
|
|||
|
|||
Control Panel
In ,
David David typed: I run a day care center. Part of my program provides PCs with educational software for the children to use. The PCs are all XP/HOME SP3. The accounts available to the kids are all user access accounts with as few privleges as possible. Still, the more inventive kids seem able to make undesireaable system changes. What I want to know is whether or not I can restrict access to the Control Panel. I don't really care if the kids can see Control Panel. What I want is to prevent any user without administrative privleges from actually using the Control Panel. Is this possible? IMO you've had a couple of good programs recommended so far. How about the physical speaker volume controls; are they accessible to the kids? Turn them down so when they max out the PC volume it only rises to a certain level that can be lived with. I liked steadystate the time I tried it. HTH, Twayne |
Thread Tools | |
Display Modes | |
|
|