how to disable user from going to windows explorer

[123gad]

I have one pc W2K Prof, which will be used from a group of people to look up some reports in one program, in order for them to use this specific program there all have to be a poweruser.
is there a way to prevent them to go anywhere else on the computer, or just to stay on the desktop - not able to go to windows explorer my computer etc.

Thanks for your help and feedback

 

[Auger282]

I can tell you that if you let someone use a "save as" or a "new" function.. they will have access to the explorer and all programs / aka they can screw around with anything.

You can run programs.. delete .. and perform all other explorer functions from these small function windows.


You can get 3rd party software to lock down the computer quite well... there are also applications that will restore the workstation on reboot no matter what the user does to the workstation (if you get my drift)

Where there is a will there is a way....

 

[wcburton]

Also, with some digging around and granting of permisions you may be able to get the program to run as a limited user. Common things to look for if something runs for a power user but not a limited user are:

1) modify rights needed in a directory somewhere beneath "Program Files" (you can change permisions for Users from read only to modify either on the specific programs directory or on a specific file in that directory)

2) permissions need to be granted on a specific registry key used by the program

One program we have uses Paradox for some local files. PDOXUSRS.NET in the root directory needs to have the permissions modified to allow Users to modify the file.

There are utilities (such as NTFILEMON or NTREGMON from sysinternals.com) that will allow you to monitor what files and registry settings a program actually uses.

 

[ObiwanSte]

If the machine is part of a domain (or better yet if you can make it one) you can lock it down completely with Group Policy.

I do this for a few of the machines in our warehouse. Stops the guys from breaking Windows every 5 minutes.

Steve