Hey Sages,
I take care of a school full of Win XP laptops and we’re going to have a server up and running soon, but in the meantime I have to administer the laptops as standalone boxes. I’d like to disable the RUN command and access to the command prompt in the laptops, but changes in Group Policy will affect every user including the Administrator (right?). I checked the local security options in the Administrative Tools, but that doesn’t seem to handle the command prompt or RUN command. I have a nice disk image for the boxes with RUN enabled.
As this is a short term situation, I don’t want to bother setting up Doug Knox’s excellent XP Security Console or another third party program, so I see myself facing a tradeoff.
1) Leave RUN available to my students and hope that they don’t mess the machines up too much in the next month or so.
2) Disable RUN and wipe/Ghost any machine that develops problems that I might normally fix with access to RUN.
I’m leaning toward the latter, but thought I might check if anyone knows away to get to GPedit when RUN is disabled.
Thanks much for any advice or answers,
Lev
