Microsoft
Software
Hardware
Network
Question : Restrict acces to Computer Management
Is it possible to restrict users from accesing the Computer Management via right click - My computer - Manage ???
Either via GPO og Regisrty????
Regards.
/Jesper
Answer : Restrict acces to Computer Management
Yes - use a software restriction polict in GPO
restrict access to Compmgmt.msc
Software Restriction Policies
Blocking Programs, Executables and scripts
2K/XP/2003
Software restriction policies can be applied to just about any program script or file, the big advantage to using this method is, it digitally fingerprints the file so if you have a clever user even changing the executable or file name wont let them run it.
As With all policies you can deploy them locally on each machine (start > run > gpedit.msc) or for everyone at once via the Domain Group Policy (AD users and computers or GPMC (group policy management console)
Whilst in The Policy Manager (either local or domain)
Navigate to
Computer Configuration\Windows Settings\Security Settings\Software Restriction Policies
By Default there is nothing there
Click Action > Create New Policy
Right Click Additional Rules > Create Hash Rule
Click the Browse Button
Navigate to the Executable/Program you want to stop users using.
Click OK
Set the Security Level to Disallowed
Click Apply > OK
References
http://www.microsoft.com/t
echnet/pro
dtechnol/w
inxppro/
ma
intain/rst
rplcy.mspx
#EKAA
http://www.microsoft.com/t
echnet/sec
urity/prod
tech/windo
wsxp/
secwi
nxp/xpsgch
06.mspx
Random Solutions
CallManager Express - edit translation rules
Verizon Closed port 25
When importing my address book from embarqmail.com I get ,error message
Cisco 1721 wr mem not saving
Kilo Convertor Window Class
Subnetting
cpanel setting up Email Authentication, error about domainkeys and SPF
ping failing on 2nd hop
BGP firewall
Using NETDOM to rename PC, User Name cannot be found