Deny Access XP Home

[VicRattlehead]

Hello,I know this is for XP Pro,but I need a hand with Home if anyone is an Expert to help me! I am setting up a 12Host Netowrk using Windows XP Home!(I know) Im going to have 3 user types!
(1)Super Admin = Me&Company owner
(2)Admin = Able to install programs,configure programs,BUT CANT MAKE SYSTEM CHANGES!such as Network Connections,add\remove hardware
(3)User accounts can run programs but thats about it!
How can I using either system registry or something else to DENY the normal Admins from access "System" or "Network Connection" from anywhere on the Operating System.
For example Ive been able to deny all users except Myself accessing the Control Panel from configuring the registry,is there anyway this can be done for 100% sure to block (2)admin(3)users access or changing setting on network connection.
Buying XP Pro isnt an option and users will have to use windows!Thanks for any help in advance

 

[cjpmcglinchey]

Hi

you can use the GPEDIT.MSC and deny access to almost everything in there.

click start>run then gpedit.msc

Hope this helps

Regards

Chris

 

[bcastner]

Gpedit.msc is not available for XP Home.
You have limited ability to create user types and set restrictions in XP Home; there are only two account types - Administrator and Limited User.

http://www.windowsnetworking.com/j_helmig/wxphusrm.htm

http://netsecurity.about.com/cs/windowsxp/a/aa042204.htm

 

[VicRattlehead]

But it can b done,Ive seen it done before!!!Thers just some way of changing the registry file

 

[bcastner]

Ability to rename LAN connections or remote access connections for all users
KEY: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Network Connections
DWORD: NC_RenameConnection = 1
Prohibit access to properties of components of LAN connections
KEY: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Network Connections
DWORD: NC_LanChangeProperties = 0
Prohibit acces to properties of components of remote access connections
KEY: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Network Connections
DWORD: NC_RasChangeProperties = 0
Prohibit TCP/IP advanced configuration
KEY: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Network Connections
DWORD: NC_AllowAdvanceTCPIPConfig = 0
Prohibit access to the Advanced Setting item on Advanced menu
KEY: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Network Connections
DWORD: NC_AdvancedSettings = 0
Prohibit adding or removing components for the LAN or remote access connections
KEY: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Network Connections
DWORD: NC_AddRemoveComponents = 0
Prohibit access to properties of LAN connections
KEY: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Network Connections
DWORD: NC_LanProperties = 0
Ability to change properties of an all user remote access connection
KEY: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Network Connections
DWORD: NC_RasAllUserProperties = 1
Prohibit changing properties of a private remote access connection
KEY: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Network Connections
DWORD: NC_RasMyProperties = 1
Prohibit deletion of remote access connection
KEY: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Network Connections
DWORD: NC_DeleteConnection = 0
Ability to delete all user remote access connections
KEY: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Network Connections
DWORD: NC_DeleteAllUserConnection = 1
Prohibit Enabling/Disabling components of a LAN connection
KEY: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Network Connections
DWORD: NC_ChangeBindState = 1
Prohibit connecting and disconnecting a remote access connection
KEY: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Network Connections
DWORD: NC_RasConnect = 0
Ability to Enable/Disable a LAN connection
KEY: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Network Connections
DWORD: NC_LanConnect = 1
Prohibit access to the New Connection wizard
KEY: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Network Connections
DWORD: NC_NewConnectionWizard = 0
Ability to rename LAN connections
KEY: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Network Connections
DWORD: NC_RenameLanConnection = 1
Ability to rename all user remote access connections
KEY: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Network Connections
DWORD: NC_RenameAllUserRasConnection = 1
Prohibit renaming private remote access connections
KEY: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Network Connections
DWORD: NC_RenameMyRasConnections = 0
Prohibit access to the Dial-Up preferences on the advanced menu
KEY: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Network Connections
DWORD: NC_DialupPrefs = 0
Prohibit viewing of status for an active connection
KEY: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Network Connections
DWORD: NC_Statics = 0
Enable Windows 2000 Network Connections settings for Administrators
KEY: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Network Connections
DWORD: NC_EnableAdminProhibits = 1

 

[JFBouchard]

Hi, power users can install programs so instead of admin, put them in power users, they won't be able to modify system settings.

Super admin will be only admin on all computers.

Hope this helps. Please let know if this resolve your issue

Jeff

 

[bcastner]

XP Home does not have a "Power Users" group.

Each interactive user in XP Home is assumed to be a member of the Owners local group, which is the Windows XP equivalent of the Windows 2000 Administrator account: This means that anyone who logs on to a Home Edition machine has full control. Likewise, the Backup Operators, Power Users, and Replicator groups from Windows 2000/XP Pro are missing from Home Edition, and a new group, called Restricted Users, is added. Hidden administrative shares (C$, etc.) are also unavailable in Home Edition.

http://www.winsupersite.com/showcase/windowsxp_home_pro.asp

I should note here before someone brings it up that it can appear using the control userpasswords2 as if you can use XP Pro Groups in XP Home. This is a bug, and the Groups are undefined. Assigning users to Groups through this method can cause very strange results.