General discussion

  • Creator
    Topic
  • #2317925

    Local Security

    Locked

    by qpeabody ·

    I support computers in a work group in a school setting , and I’m creating a ghost image for some new computers. I want lock down the desktop to prevent anyone from changing it, i.e. webshots. I would also like to prevent them from downloading anything. I’ve made them users, so they can’t install anything. Finally, the question. Are there any local rights/policies that I can change/set to accomplish my goal?

All Comments

  • Author
    Replies
    • #3544000

      Reply To: Local Security

      by rayash69 ·

      In reply to Local Security

      I do not know if there is a shorter method or not but this should suffice. In the administration tools there is a utility that will allow you to write a rule for this.

      The command that is run from the command line is:
      %SystemRoot%\system32\secpol.msc /s

      The name of the shortcut is Local Security Settings.
      When you open it up it looks like any of the system viewers with a tree on the left and detailed info on the right. Well if you have not opened it before to attempt this (like me) then you will not have any items under software restriction policies. Highlight it and click on Action at the top, select create from the menu. Select the desktop then disallow. Select administrators for full access to this just in case. I used this on my Guest account and it isn’t allowing me to change the desktop, I believe that is the only change I made while playing around in there.

    • #2747043

      Reply To: Local Security

      by qpeabody ·

      In reply to Local Security

      I’m not seeing what you describe in your answer. When I click on “software restriction policies”, I see security levels, additional rules, enforcement, designated file types, and trusted publishers. When I click on security levels, all I see is disallowed and unrestricted. I don’t see anything about desktop. Thanks

    • #2685577

      Reply To: Local Security

      by qpeabody ·

      In reply to Local Security

      This question was closed by the author

Viewing 2 reply threads