General discussion


Local Security

By qpeabody ·
I support computers in a work group in a school setting , and I'm creating a ghost image for some new computers. I want lock down the desktop to prevent anyone from changing it, i.e. webshots. I would also like to prevent them from downloading anything. I've made them users, so they can't install anything. Finally, the question. Are there any local rights/policies that I can change/set to accomplish my goal?

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

by rayash69 In reply to Local Security

I do not know if there is a shorter method or not but this should suffice. In the administration tools there is a utility that will allow you to write a rule for this.

The command that is run from the command line is:
%SystemRoot%\system32\secpol.msc /s

The name of the shortcut is Local Security Settings.
When you open it up it looks like any of the system viewers with a tree on the left and detailed info on the right. Well if you have not opened it before to attempt this (like me) then you will not have any items under software restriction policies. Highlight it and click on Action at the top, select create from the menu. Select the desktop then disallow. Select administrators for full access to this just in case. I used this on my Guest account and it isn't allowing me to change the desktop, I believe that is the only change I made while playing around in there.

Collapse -

by qpeabody In reply to

Poster rated this answer.

Collapse -

by qpeabody In reply to Local Security

I'm not seeing what you describe in your answer. When I click on "software restriction policies", I see security levels, additional rules, enforcement, designated file types, and trusted publishers. When I click on security levels, all I see is disallowed and unrestricted. I don't see anything about desktop. Thanks

Collapse -

by qpeabody In reply to Local Security

This question was closed by the author

Related Discussions

Related Forums