RE: classroom/kiosk type security

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Jason Tan (v-jasont_at_online.microsoft.com)
Date: 02/21/05 

Date: Mon, 21 Feb 2005 11:07:15 GMT

Hi Joe,

Thanks for posting!

I notice that you have posted the same question 27574998 in our
microsoft.public.windowsxp.security_admin newsgroup, to which I have
already responded. I will follow up your issue on that thread.

For your convenience, I have included my reply as follows:
==================================================================
Hi Joe,

Thanks for posting!

My understanding on the issue is: you want to prevent domain users from
installing software and creating folders in drive C. If I have
misunderstood your concerns, please feel free to let me know.

By default, standard domain user will be a member of Local User on the
domain machine. You may prevent domain user from installing software and
creating folders and files. I would like to provide you the following
method for your reference:

Right-click C: -> click Properties item-> click Security tab -> click Users
->click Advanced button-> click Permissions -> remove

Name Permission
Users Create files/Write data
Users Create folders/Append data

Note: Do not remove local "Users" group.

Please note that the partner managed newsgroups provide assistance to
resolve break/fix issues. We also recommend Microsoft Advisory Services, a
remotely-delivered, consultative support option that adds the element of
proactive support, providing a comprehensive result beyond your break-fix
product maintenance needs. More information on this service here:
http://support.microsoft.com/gp/advisoryservice

Thanks & Regards,

Jason Tan
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Quantcast