Windows XP Pro lock down

[flipke]

Hi


I know you can keep users from - for example - opening the Windows update website via Group Policy, but when you do so in User Configuration it goes for every user logging on to your system. Even the administrator.
Is there a way to do this for a specific user?

There's no active directory in my example. Just a single computer.

 

[jthiessen]

A simple way to affect Windows Update is to make other users limited users. This also limits their ability to install programs though.

Josh

MCSE, CCNA, MCT, MCP

 

[joemck2004]

One way is to put the Windows Update site in the HOSTS file (it's usually in c:\windows\system32\drivers\etc) with the IP address 127.0.0.1. Now Windows Update will be completely inaccessable on that computer, provided that the other users don't have the permission (or knowledge) to edit HOSTS. To use it yourself just comment out the line in HOSTS.

Note: Sometimes changes to HOSTS don't take effect until reboot. Also, HOSTS might be read-only; use attrib to fix it.

 

[flipke]

Well, these may be true, but the final intention of it all will be a total lock down of the system for any user except for the administrator. And we don't want to use any 3rd party software to do so.


Tia

flipke

 

[bcastner]

The Everyone But the Administrator trick:

Several different ways:

http://www.mail-archive.com/techtarget@lists.techtarget.com/msg00083.html

http://www.jsiinc.com/SUBL/tip5600/rh5619.htm

http://techrepublic.com.com/5100-6270-1040230.html

 

[linney]

Copy and paste the whole link.

http://www.mail-archive.com/techtarget@lists.techtarget.com/msg00083.html

 

[bcastner]

Sorry, I have been caught on the TGML handling of "@" in links before and always miss it.