Windows Forum

Ask something
Discussion Locked

Local Security

0 helpful
4 replies

by qpeabody

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I support computers in a work group in a school setting , and I'm creating a ghost image for some new computers. I want lock down the desktop to prevent anyone from changing it, i.e. webshots. I would also like to prevent them from downloading anything. I've made them users, so they can't install anything. Finally, the question. Are there any local rights/policies that I can change/set to accomplish my goal?

4 replies

by rayash69

I do not know if there is a shorter method or not but this should suffice. In the administration tools there is a utility that will allow you to write a rule for this.

The command that is run from the command line is:
%SystemRoot%\system32\secpol.msc /s

The name of the shortcut is Local Security Settings.
When you open it up it looks like any of the system viewers with a tree on the left and detailed info on the right. Well if you have not opened it before to attempt this (like me) then you will not have any items under software restriction policies. Highlight it and click on Action at the top, select create from the menu. Select the desktop then disallow. Select administrators for full access to this just in case. I used this on my Guest account and it isn't allowing me to change the desktop, I believe that is the only change I made while playing around in there.

by qpeabody

I'm not seeing what you describe in your answer. When I click on "software restriction policies", I see security levels, additional rules, enforcement, designated file types, and trusted publishers. When I click on security levels, all I see is disallowed and unrestricted. I don't see anything about desktop. Thanks

This discussion is closed to new replies.