Locked down user Accounts

[shawkz]

Hi, i want to be able to add user(s) to a usergroup called 'level1' or somthing which when they log on all they do is run the programms i put in the start menu/desk top. They cant change wallpaper, screen saver etc... The start memu just has the programs that are on the desktop. Can any one help!!

Kindest regards,

SHawkz

 

[bcastner]

Create a Custom Default User Profile:

http://support.microsoft.com/defaul...port/kb/articles/q305/7/09.asp&NoWebContent=1

Mandatory Profiles in XP:

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q307800&sd=tech

____________________________
Users Helping Users

 

[shawkz]

Hi, thanks for you help. I couldnt see a way to restict access. have been playing with gpedit.msc but this just seems to change all the users access including the administrator not just the users.

I want to be able to create a group which has all these restrictions then to add the users to that group. Can remove if required (say to install new software) then readd to the locked down group.

Kindest regards,

SH

 

[shawkz]

Im still having problem with this. Seems like i lock all the accounts down not just the users. Any ideas?

Kinest thanks

Steve

 

[porkchopexpress]

If you have an Active Directory you could use folder redirection for that group.

http://www.windowsdevcenter.com/pub/a/windows/2004/08/24/folder_redirect.html

 

[shawkz]

Hi, i have managed to sort it out by editing the registry manualy. However i cant remove the control panel off of the start menu? Any ideas... Here is my registry file that i can use on any of my machines to lock the users down...

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDriveTypeAutoRun"=dword:00000091
"NoRun"=dword:00000001
"NoStartMenuPinnedList"=dword:00000001
"NoStartMenuMorePrograms"=dword:00000001
"NoCommonGroups"=dword:00000001
"GreyMSIAds"=dword:00000001
"NoWindowsUpdate"=dword:00000001
"NoStartMenuMyMusic"=dword:00000001
"NoSMMyPictures"=dword:00000001
"NoFavoriteMenu"=dword:00000001
"NoRecentDocsMenu"=dword:00000001
"DisableMyPicturesDirChange"=dword:00000001
"DisableMyMusicDirChange"=dword:00000001
"DisableFavoritesDirChange"=dword:00000001
"NoSMMyDocs"=dword:00000001
"DisablePersonalDirChange"=dword:00000001
"ClearRecentDocsOnExit"=dword:00000001
"NoFavoritesMenu"=dword:00000001
"NoNetworkConnections"=dword:00000001
"NoStartMenuNetworkPlaces"=dword:00000001
"NoRecentDocsNetHood"=dword:00000001
"NoSMHelp"=dword:00000001
"NoFind"=dword:00000001
"MemCheckBoxInRunDig"=dword:00000001
"NoResolveSearch"=dword:00000001
"NoResolveTrack"=dword:00000001
"NoChangeStartMenu"=dword:00000001
"NoInstrumentation"=dword:00000001
"NoStartMenuMFUprogramsList"=dword:00000001
"NoSMConfigurePrograms"=dword:00000001
"NoSetFolders"=dword:00000001
"NoSetTaskBar"=dword:00000001
"NoDispBackgroundPage"=dword:00000001
"NoDispCPL"=dword:00000001
"ClassicShell"=dword:00000001
"NoDispScrSavPage"=dword:000000010
"NoViewContextMenu"=dword:00000001
"NoSimpleStartManu"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum]
"{20D04FE0-3AEA-1069-A2D8-08002B30309D}"=dword:00000001



Regards,

SH