A Windows XP help forum. PCbanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PCbanter forum » Microsoft Windows XP » Security and Administration with Windows XP
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

Restrictions and rights



 
 
Thread Tools Display Modes
  #1  
Old February 24th 10, 04:00 PM posted to microsoft.public.windowsxp.security_admin
George
external usenet poster
 
Posts: 127
Default Restrictions and rights

Hello,
i have 10 users pc that all users have full local administrator rights. now
i tried to remove those rights and to have all users as normal users on the
local machine, but the most of their applications etc stopped working.
basically i want the best/easy/possible way to have all users restricted
local access
all users are xp sp2 and up and joined under the domain.
Thank you in advance
Ads
  #2  
Old February 24th 10, 06:38 PM posted to microsoft.public.windowsxp.security_admin
Anteaus
external usenet poster
 
Posts: 1,330
Default Restrictions and rights

Restricting a user has two main effects on program execution:
Inability to change files in the Windows or Program Files folders.
Inability to change settings in the HKLM registry branch.

To find out exactly why apps won't run, you would need to examine the
permissions on specific files and folders to see what is being blocked.

Most modern apps will run for a limited user, the problem generally arises
with older ones which expect to be able to write-to system folders.

If you can't restrict the useraccounts, a good alternative security-measure
to reduce the risk of malware, etc is a software restriction policy.

http://sourceforge.net/projects/softwarepolicy

"George" wrote:

Hello,
i have 10 users pc that all users have full local administrator rights. now
i tried to remove those rights and to have all users as normal users on the
local machine, but the most of their applications etc stopped working.
basically i want the best/easy/possible way to have all users restricted
local access
all users are xp sp2 and up and joined under the domain.
Thank you in advance

 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off






All times are GMT +1. The time now is 05:50 PM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 PCbanter.
The comments are property of their posters.