Re: xp security question

From: Bill (wdotsmith155atverizondotnet)
Date: 04/09/04


Date: Thu, 8 Apr 2004 21:38:51 -0500

As far as I know the only way to achieve what you're after is to set
permissions on the individual objects listed in the administartive
tools....for example, on my system I only have administartive tools showing
in my control panel, right click on the specific object listed in admin
tools, click properties and note the target file name and path. Find the
file, secpol.msc as 1 example located in the system32 folder. Make sure you
have simple file sharing disabled from the advanced folder options at the
bottom. right click on secpol.msc, click properties, select the security
tab. There are a few ways from here to achieve the goal, you can either just
remove power users group name from the listing of groups, which is kind of
relaxed security, or you can leave power users listed and set a deny
permission for the group which is much more strict and more likely to keep
prying children from changing your security settings and screwing up the
computer. Click apply rhen ok. Lather rinse and repeat for all desired
objects. HTH

-- 
----------------------------------------------------------------------------
-----
Remember life is not a box of chocolates it's a jar of
jalapenos...what you do today could burn your ass
tomorrow!!!
----------------------------------------------------------------------------
-----
"Tobamore" <tobamore@DELETE_THISyahoo.co.uk> wrote in message
news:iu2b70tmjjidd2cmbdsugdnrb0qldd4ltp@4ax.com...
> Hi,
> I am running a family pc in xp. My wife and I are administrators and
> my children of varying ages are power users. My question is this, how do I
> prevent no administrators from logging into 'admin. tools' > 'computer
> management' and simply adjusting there access to that of administrator? It
> is only really a matter of interest and not important, but I find that to
be
> a loophole as I can change this through their accounts, even though they
are
> not even permitted to change the time!
>
> many thanks in advance.


Relevant Pages

  • Re: Shared permissions vs. security
    ... Did you have to make the users power users or administrators only after you ... write/modify permissions to a folder if that is what they need to do their ... -- Verify that membership in the administrators group on all computers is ... updates at Windows Updates. ...
    (microsoft.public.win2000.security)
  • Exact permissions needed to manage PF properties in System Manager
    ... I have a few administrators who belong to a security group that is ... propereties of public folders. ... So far I have not been able to figure out what exact permissions (and ...
    (microsoft.public.exchange.admin)
  • Re: HP LaserJet 5L Printer
    ... a problem where only 'Administrators' are allowed to use the HP. ... It took us ages to find out that our HP3330 came with the 'security' options ... set for Power Users and Administrators only. ... 'Use simple file sharing' is also found in a very odd place: ...
    (microsoft.public.windowsxp.print_fax)
  • RE: Access Denied when running RSoP
    ... The launch and activation security descriptor for the COM Server application ... It contains Access Control Entries with permissions that are ... which is a part of the McAfee Common ... > Administrators - Full Control - This namespace and subnamespaces ...
    (microsoft.public.windows.server.sbs)
  • Re: Open With.. functionality doesnt fully work
    ... key's permissions are getting munged, ... > Small correction: ... > Ramesh, Microsoft MVP ... >> Administrators ...
    (microsoft.public.windowsxp.customize)

Quantcast