IT Employment
by ghstinshll
The option to hide admin tools is under the Advanced Properties of the Taskbar. This is how you can hide these, but if users adept enough to know the other ways to get into them, it won't help. This will keep most from stumbling into them. Other than that, you may need to change your ghost images to reflect an NTFS permissions change on the MMC, keeping them from launching it.
I'm not sure of how, but there has to be a way to write a custom GP to reflect these as registry changes too, but I'm not sure how.
by lordinfidel
While hiding the admin tools is preferable, and is done by default.
Even if the admin tools are present there is not much they can do if they are not an admin on the local machine, with the exception of viewing things.
by lordinfidel
In your default domain policy under:
User Configuration/Admin Templates/Windows Components/Microsoft Management Console/Restricted-permitted snap-ins.
You can restrict as much as you like.
by mandume
Try this.
use the find command to find the administrative tools user default users. Right click on Administrative tools, then properties and thean security. Denie access to the users/group you want.
Regards
Mandume
by lordinfidel
Not to be an ass but you can't set ntfs permissions on the administrative tools folder?
Why, because it really does not exist.
It is similiat to control panel. Do you see a control panel folder in winnt\????
No..... It's dynamically generated by the OS.
You need to restricy it by the security policy govering snap-ins.
Thanx for playing, but try it before you give out the advice.
This discussion is closed to new replies.
Sort by Trending