Windows 2000 Pro Non Admin Account

[alberteinstein]

Hi all !

I have a windows 2000 Professional system .After I came to know that running the system as LUA [ limited user acct] is more secure than as Admin,I have created a "Restricted

User " Account with password ,and am using it.{ the admin has no passwd ]

However,Iam surprised that Iam able to rename,delete system files [

c:\winnt\system32 ] etc ,!! - when LUA account is supposed to prevent
such things from happening.

Also,I was able to install software etc - a facility I didnt want in LUA account at all.

Am I doing somethin wrong?
Could you tell me how to restrict the afore mentioned tasks?

Thank you.

Albert

 

[Auger282]

those things are controled in the group policies... you can add a high security template to the users policy..

Read up on group policies... you can control access levels and control variables..

 

[alberteinstein]

Thanx Auger,

But how to do the things you said?