Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations bkrike on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
HOW TO LIMIT USERS TO ONE EXECUTABLE
- Thread starter AC550
- Start date
If you are in an AD domain then you can use the Group Policies to lock them down. You should be able to remove all icons off of the desktop (except the one you want) and completely disable the start menu. My location is still on an NT 4 domain so I'm rusty on the specifics on how to do this.
One side note: make sure you kill the "New Task ..." button on the task manager or kill access to the task manager ... that would be a large loop hole.
Later ...
One side note: make sure you kill the "New Task ..." button on the task manager or kill access to the task manager ... that would be a large loop hole.
Later ...
Group Policy allows you to define what can be run, and what cannot be run. In combination this effectively locks the machine.
In a workgroup setting one has to be a little carefull to not deny to all users (including the Administrator) access to the machine.
You might benefit from a post I made a little while ago: Cool Tip #1, a Workgroup Policy Editor for XP: thread779-685048
In a workgroup setting one has to be a little carefull to not deny to all users (including the Administrator) access to the machine.
You might benefit from a post I made a little while ago: Cool Tip #1, a Workgroup Policy Editor for XP: thread779-685048
- Thread starter
- #4
OzCDN,
Thanks for the advice- I have a program that we replace explorer with in the shell so icons and start menu are gone. My problem is they use ctrl alt del to access task manager and run new task just like you said. I am not sure how to kill access to task manager-can you help? Thanks
Thanks for the advice- I have a program that we replace explorer with in the shell so icons and start menu are gone. My problem is they use ctrl alt del to access task manager and run new task just like you said. I am not sure how to kill access to task manager-can you help? Thanks
Hive: HKEY_CURRENT_USER
Key: Software\Microsoft\Windows\CurrentVersion\Policies\System
Name: DisableTaskMgr
Type: REG_DWORD
Value: 1=Enablethis key, that is DISABLE TaskManager
Value: 0=Disablethis key, that is Don't Disable, Enable TaskManager
As part of the enhanced management available in Windows 2000 and Windows XP, rather than risking a registry change, as an administrator you can enable or disable Windows 2000 Pro or Windows XP Pro's TaskManager using Group Policy Editor. This can be applied to the local policy. Note: if you are trying to override your organizations group policy, you can't. As soon as you re-authenticate to the domain, the domain or OU Group Policy will rewrite the registry setting. But if the TaskManager was accidently disabled or you need to control this item for a set of standalone boxes this is for you:
Click Start
Click Run
Enter gpedit.msc in the Open box and click OK
In the Group Policy settings window
Select User Configuration
Select Administrative Templates
Select System
Select Ctrl+Alt+Delete options
Select Remove Task Manager
Double-click the Remove Task Manager option
Since the policy is Remove Task Manager, by disabling the policy, you are enabling the Task Manager.
Key: Software\Microsoft\Windows\CurrentVersion\Policies\System
Name: DisableTaskMgr
Type: REG_DWORD
Value: 1=Enablethis key, that is DISABLE TaskManager
Value: 0=Disablethis key, that is Don't Disable, Enable TaskManager
As part of the enhanced management available in Windows 2000 and Windows XP, rather than risking a registry change, as an administrator you can enable or disable Windows 2000 Pro or Windows XP Pro's TaskManager using Group Policy Editor. This can be applied to the local policy. Note: if you are trying to override your organizations group policy, you can't. As soon as you re-authenticate to the domain, the domain or OU Group Policy will rewrite the registry setting. But if the TaskManager was accidently disabled or you need to control this item for a set of standalone boxes this is for you:
Click Start
Click Run
Enter gpedit.msc in the Open box and click OK
In the Group Policy settings window
Select User Configuration
Select Administrative Templates
Select System
Select Ctrl+Alt+Delete options
Select Remove Task Manager
Double-click the Remove Task Manager option
Since the policy is Remove Task Manager, by disabling the policy, you are enabling the Task Manager.
- Thread starter
- #6
- Status
Similar threads
- Locked
- Question