Restriction Policies

[JCrou82]

I Have two new windows XP Pro machines. I have only one user, excluding the built in Administrator. What I want to be able to do, and I'm not sure where to start, is to deny the user account the ability to install or uninstall programs. The only thing I do want them to be able to do is download and install Windows Updates and Symantec Anti-Virus Updates. They should also be able to download word docs or excel spreadsheets, etc. Basically, I don't want them to install "Junk" progams. Does any one know how to do this or where I can read up on doing this? I don't know where to start. Also, the adminstrator should be allowed to obviously do anything they need to do.

Since I will be denying them access to installing, is there a way to log in as the administrator from another location. Basically, I'm going to be in the office and these machines will be in our stores (a separate location). If they need a particular program from the internet that I didn't pre-install (for example Adobe Reader), is there a way that I can log in from the office and download and install the program they need?

Thanks

 

[noobtechie]

To log in to remotely from your location to a different one you can use different programs. One of them is made from Microsoft itself. Read on

http://www.microsoft.com/windowsxp/pro/using/howto/gomobile/remotedesktop/default.asp

Other third party programs can be

http://www.symantec.com/pcanywhere/Consumer/index.html

(my favorite)

http://www.tightvnc.com/

http://www.access-remote-pc.com/default.shtm

Second thing, limiting users.

http://www.softheap.com/restriction/

Read to the internet options.


Last thing, set those user's as a different group other than administrators. Start\settings\control panel\users and passwords\"add then in the proper group"
Hope this helps.


============================
There is no place like 127.0.0.1