up vote 0 down vote favorite
share [g+] share [fb]

Is there a way to restrict access for specific (non admin) users to cmd, Windows tools, and Explorer on a Windows XP system?

I want to do the following:

  1. Deny access to cmd, local disks, registry editor, etc from group policy (allow batch)
  2. Configure a logon script which for admin users removes this restriction from registry; for non admin users it will not be able to remove restrictions because it does not have the rights.

Is there a better way which can also cover more restricted items?

link|improve this question
2  
A problem you will later encouter are the "browse" and "save as" windows which enable a user to bypass many restriction because they are part of explorer.exe and are needed by many programs. Anyway be sure you test your final setup with this tool, it will help you secure your boxes: ikat.ha.cked.net/Linux – Shadok Sep 22 '11 at 15:55
feedback

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
or
required, but never shown
discard

Browse other questions tagged or ask your own question.