Re: Security Questions

From: Stanley Jones [MSFT] (stjone_at_online.microsoft.com)
Date: 11/29/04 

Date: Mon, 29 Nov 2004 14:57:05 -0800

Try searching through the Group Policy Editor for options that suit your
needs. You may find a way to combine a few of your goals. 

-- 
This posting is provided "AS IS" with no warranties, and confers no rights
-Stan
"Robert Paris" <rpjava@hotmail.com> wrote in message 
news:e2pQt1p0EHA.3588@TK2MSFTNGP14.phx.gbl...
>I am looking for how I can do the following on Win2K:
>
> 1. Disable a User's ability to write to/edit the registry
>   (Actually disable for all but Administrator)
>
> 2. Disable user's ability to write files to all but one folder
>
> 3. Disable user's ability to execute any program except for a few that I
> specify
>   (And can I log attempts to run/execute programs?)
>
> 4. In disabling cmd.exe, can I set up only two programs to run (on 
> startup)
> in command prompts (with RunAs service) - they're java programs - and 
> still
> keep all other java programs and the user from being able to do anything 
> in
> command prompt?
>
> Answers to any of these questions would be greatly appreciated. Any 
> pointers
> to further resources would be great too! Thanks!
>
>

Relevant Pages

  • Re: Quantum Mechanics according to Mark Mccutcheon
    ... In the presence of powerful skeptics. ... > disturbing waves that may disturb the demonstration. ... > psychics can temporarily lose their ability. ... > for how the psi disabling may occur (via out of time ...
    (sci.physics)
  • Re: Windows XP Pro Taskmgr.exe
    ... also like to remove the ability to copy taskmgr.exe from another ... Disabling task manager isn't the issue here - that's a bandaid (and it's one ... I wouldn't want to apply as Task Manager is really pretty damned useful). ... accounts or unauthorized local accounts should be in the local ...
    (microsoft.public.windows.server.sbs)
  • Re: Embedding Simple MFC GUI app into website
    ... The real trick is to reduce the attack profile. ... Internet and all my other ... I have disabled the ability to ... Most of what I'm disabling exists not because of "bugs" that cause ...
    (microsoft.public.vc.mfc)
  • Re: Win 2k Security Questions
    ... Microsoft MVP (Windows Security) ... MCSE MCDBA ... Disable user's ability to write files to all but one folder ... In disabling cmd.exe, can I set up only two programs to run (on ...
    (microsoft.public.windows.server.security)